2c5e7a3f0d1087dc6055924641937d6cdacfb5629bf1d39f9e1fc64b3cccd797ce16f089a2a856e2f55c51f1e7d2c3fe4121efe196f42bdf0d78259600ddc7ecd3fab30dd61b76188b5540b36ae399c1cd07da95252fcaa29304e0cd3ac916229383213cd8f6012e0f3d0fa8226936ea4ebd527b0b631a33908f606f3979e4565d8955328c999130a8730725fabae4391ee6261a38ad601d8609bddf175c566b3da5c93f8aa1bcb", 0x85c}], 0x8}}], 0x1, 0x0) 17:39:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000004080501ff0080fffdffff3e8a0000000c00030088ffffff7d0a00010c000200000022ff02f14000"], 0x2c}}, 0x0) 17:39:18 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) memfd_create(&(0x7f0000000540)='\x00', 0x17) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0xe, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r3 = dup(r2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r5, 0x0, 0x8000fffffffe) [ 1076.503377][ T1287] kvm [1286]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x0 [ 1076.516803][ T1296] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1076.525248][ T1296] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 17:39:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 17:39:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x3d, 0x0, [0x20c0010004]}) 17:39:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ad33ea08eb0302002d4a0000000109021b0001000000000904ba0001727755000705810000000000005ddf0beb7cbfe908fe1eab0bbb88d772214f4de1c9bf6690d438390600000000000000c250bfee44f5a12a6069d1c509cb34d8e41720"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "d7d5044de833c5d71a149f26c72638144e59ffdcd0bcf7ff85dbba4afe093a40"}) 17:39:18 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "610d7c6a96fc6609cdf2aad30c855a251a68fdaec5ca47fdc9833e2d878d93f7"}) 17:39:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:39:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) 17:39:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 17:39:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 17:39:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1077.202407][ T17] usb 2-1: new high-speed USB device number 65 using dummy_hcd 17:39:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000080), 0x301) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000080), 0xfcf3) 17:39:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000000)) 17:39:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 17:39:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100050c0800fcff0000040e05a5", 0x58}], 0x1) [ 1077.443150][ T17] usb 2-1: Using ep0 maxpacket: 8 17:39:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0505510, 0x717000) [ 1077.562741][ T17] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1077.571129][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.581826][ T17] usb 2-1: config 0 has no interface number 0 [ 1077.588317][ T17] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1077.597827][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.731115][ T17] usb 2-1: config 0 descriptor?? [ 1077.777231][ T17] Registered IR keymap rc-hauppauge [ 1077.785101][ T17] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1077.797988][ T17] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input125 [ 1077.978518][ T17] usb 2-1: USB disconnect, device number 65 [ 1078.802664][ T2889] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1079.062288][ T2889] usb 2-1: Using ep0 maxpacket: 8 [ 1079.182454][ T2889] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1079.191050][ T2889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.201412][ T2889] usb 2-1: config 0 has no interface number 0 [ 1079.207969][ T2889] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1079.217224][ T2889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.226712][ T2889] usb 2-1: config 0 descriptor?? [ 1079.277275][ T2889] Registered IR keymap rc-hauppauge [ 1079.284787][ T2889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1079.297196][ T2889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input126 17:39:21 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x96, 0xb7, 0x93, 0x8, 0x1286, 0x204e, 0x498d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 17:39:21 executing program 4: r0 = socket(0xa, 0x802, 0x88) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="1986bfbaaaef692d10086e5f77139a5e0b2ebdaccb11e1a049", 0x19}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffe15, 0x0}}], 0x183, 0x0, 0x0) 17:39:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbf, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000000)=""/195}, 0x48) 17:39:21 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ad33ea08eb0302002d4a0000000109021b0001000000000904ba0001727755000705810000000000005ddf0beb7cbfe908fe1eab0bbb88d772214f4de1c9bf6690d438390600000000000000c250bfee44f5a12a6069d1c509cb34d8e41720"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "d7d5044de833c5d71a149f26c72638144e59ffdcd0bcf7ff85dbba4afe093a40"}) 17:39:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_out(r0, 0x100810080804523, 0x0) 17:39:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) [ 1079.489942][ T2889] usb 2-1: USB disconnect, device number 66 17:39:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 17:39:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 17:39:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x1000004d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 17:39:21 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa5, 0x57, 0x77, 0x8, 0x9710, 0x7810, 0xe38f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x3, 0xdf, 0x4a, 0x15, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2d552b3f4576f05f}}, {{0x9, 0x5, 0xf, 0x2}}, {{0x9, 0x5, 0x81, 0x12}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001400)={0x34, &(0x7f0000001180)={0x0, 0x0, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:39:21 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x34565348}}) [ 1079.812765][T12317] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1079.877444][ T1400] input:  as /devices/virtual/input/input127 17:39:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x1, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 1079.962421][ T2889] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1080.053151][T12317] usb 6-1: Using ep0 maxpacket: 8 [ 1080.127983][ T1414] input:  as /devices/virtual/input/input128 [ 1080.172390][T31657] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1080.192752][T12317] usb 6-1: config 0 has an invalid interface number: 14 but max is 0 [ 1080.201045][T12317] usb 6-1: config 0 has no interface number 0 [ 1080.207704][T12317] usb 6-1: New USB device found, idVendor=1286, idProduct=204e, bcdDevice=49.8d [ 1080.216915][T12317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.226964][T12317] usb 6-1: config 0 descriptor?? [ 1080.252323][ T2889] usb 2-1: Using ep0 maxpacket: 8 [ 1080.283969][T31714] usb 6-1: Direct firmware load for mrvl/usbusb8997_combo_v4.bin failed with error -2 [ 1080.294180][T31714] usb 6-1: Failed to get firmware mrvl/usbusb8997_combo_v4.bin [ 1080.301857][T31714] usb 6-1: info: _mwifiex_fw_dpc: unregister device [ 1080.402785][ T2889] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1080.411248][ T2889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.421549][ T2889] usb 2-1: config 0 has no interface number 0 [ 1080.427907][ T2889] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1080.437191][ T2889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.447025][T31657] usb 3-1: Using ep0 maxpacket: 8 [ 1080.454996][ T2889] usb 2-1: config 0 descriptor?? [ 1080.476496][T31714] usb 6-1: USB disconnect, device number 73 [ 1080.507339][ T2889] Registered IR keymap rc-hauppauge [ 1080.514450][ T2889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1080.527317][ T2889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input129 [ 1080.584618][T31657] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 1080.593301][T31657] usb 3-1: config 0 has no interface number 0 [ 1080.599514][T31657] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1080.610742][T31657] usb 3-1: config 0 interface 254 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1080.620734][T31657] usb 3-1: config 0 interface 254 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1080.630933][T31657] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice=e3.8f [ 1080.640127][T31657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.650266][T31657] usb 3-1: config 0 descriptor?? [ 1080.695400][T31657] mos7840 3-1:0.254: Moschip 7840/7820 USB Serial Driver converter detected [ 1080.730240][ T2889] usb 2-1: USB disconnect, device number 67 17:39:23 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ad33ea08eb0302002d4a0000000109021b0001000000000904ba0001727755000705810000000000005ddf0beb7cbfe908fe1eab0bbb88d772214f4de1c9bf6690d438390600000000000000c250bfee44f5a12a6069d1c509cb34d8e41720"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "d7d5044de833c5d71a149f26c72638144e59ffdcd0bcf7ff85dbba4afe093a40"}) [ 1081.252403][ T17] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1081.362688][T31657] mos7840: probe of ttyUSB0 failed with error -71 [ 1081.372706][T31657] usb 3-1: USB disconnect, device number 54 [ 1081.380753][T31657] mos7840 3-1:0.254: device disconnected [ 1081.492191][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1081.582374][ T3671] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1081.612411][ T17] usb 6-1: config 0 has an invalid interface number: 14 but max is 0 [ 1081.620743][ T17] usb 6-1: config 0 has no interface number 0 [ 1081.627241][ T17] usb 6-1: New USB device found, idVendor=1286, idProduct=204e, bcdDevice=49.8d [ 1081.636515][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.646901][ T17] usb 6-1: config 0 descriptor?? [ 1081.705775][T12204] usb 6-1: Direct firmware load for mrvl/usbusb8997_combo_v4.bin failed with error -2 [ 1081.716176][T12204] usb 6-1: Failed to get firmware mrvl/usbusb8997_combo_v4.bin [ 1081.724033][T12204] usb 6-1: info: _mwifiex_fw_dpc: unregister device [ 1081.842376][ T3671] usb 2-1: Using ep0 maxpacket: 8 [ 1081.894544][ T2889] usb 6-1: USB disconnect, device number 74 [ 1081.962537][ T3671] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1081.970905][ T3671] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.981522][ T3671] usb 2-1: config 0 has no interface number 0 [ 1081.988130][ T3671] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1081.997751][ T3671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.008025][ T3671] usb 2-1: config 0 descriptor?? [ 1082.057676][ T3671] Registered IR keymap rc-hauppauge [ 1082.064888][ T3671] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1082.077823][ T3671] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input130 [ 1082.092893][T31657] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1082.265066][ T3671] usb 2-1: USB disconnect, device number 68 [ 1082.352508][T31657] usb 3-1: Using ep0 maxpacket: 8 17:39:24 executing program 0: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc00455d0, 0x0) 17:39:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}, {0x20, 0x2, @in6={0x2, 0x0, 0x0, @initdev}}}}]}]}, 0x6c}}, 0x0) 17:39:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000300)={0x6}) 17:39:24 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1082.456701][ T1436] Enabling of bearer rejected, failed to enable media [ 1082.478381][ T1437] Enabling of bearer rejected, failed to enable media [ 1082.503291][T31657] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 1082.511948][T31657] usb 3-1: config 0 has no interface number 0 [ 1082.518373][T31657] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.529824][T31657] usb 3-1: config 0 interface 254 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1082.539924][T31657] usb 3-1: config 0 interface 254 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 17:39:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000980)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1082.550071][T31657] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice=e3.8f [ 1082.559465][T31657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.604591][T31657] usb 3-1: config 0 descriptor?? 17:39:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x19, 0x0, &(0x7f0000000100)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x4c00000000000000, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17:39:24 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 1082.907184][ T1448] kvm_hv_set_msr: 318 callbacks suppressed [ 1082.907227][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006a data 0xffff04d00000000f [ 1082.962172][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1082.982081][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:39:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ad33ea08eb0302002d4a0000000109021b0001000000000904ba0001727755000705810000000000005ddf0beb7cbfe908fe1eab0bbb88d772214f4de1c9bf6690d438390600000000000000c250bfee44f5a12a6069d1c509cb34d8e41720"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "d7d5044de833c5d71a149f26c72638144e59ffdcd0bcf7ff85dbba4afe093a40"}) [ 1083.093145][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000038 data 0xffff04d00000000f [ 1083.110002][T31657] mos7840 3-1:0.254: Moschip 7840/7820 USB Serial Driver converter detected 17:39:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:39:25 executing program 0: unshare(0x20040600) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)="740a565cfa01fbfe29"}) [ 1083.153102][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000006 data 0xffff04d00000000f [ 1083.182804][T31657] mos7840: probe of ttyUSB0 failed with error -71 [ 1083.207608][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003c data 0xffff04d00000000f [ 1083.239741][T31657] usb 3-1: USB disconnect, device number 55 [ 1083.248177][T31657] mos7840 3-1:0.254: device disconnected [ 1083.254029][ T1443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.283580][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000a data 0xffff04d00000000f 17:39:25 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:39:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x0, 0xff000000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1083.343972][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000074 data 0xffff04d00000000f [ 1083.361831][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000042 data 0xffff04d00000000f [ 1083.373910][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007a data 0xffff04d00000000f [ 1083.403929][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000048 data 0xffff04d00000000f 17:39:25 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1083.467893][ T1448] kvm [1446]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000016 data 0xffff04d00000000f 17:39:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000000)=""/51, 0x33}], 0x18b}}], 0x1, 0x0, 0x0) [ 1083.592283][T31714] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1083.674130][T31657] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1083.717913][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:39:25 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000001000000cc98a4c29f1647ea8cfcb48d22"]) 17:39:25 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1083.805091][ T1485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.843412][T31714] usb 2-1: Using ep0 maxpacket: 8 17:39:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf15k\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,\xba\xfd\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3\xfe_8', &(0x7f0000000140)=@chain={'key_or_keyring:', r1, '2c\x00'}) [ 1083.974855][T31714] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1083.977192][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1083.983364][T31714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.000744][T31714] usb 2-1: config 0 has no interface number 0 [ 1084.007278][T31714] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1084.016837][T31714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.029298][T31714] usb 2-1: config 0 descriptor?? 17:39:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x40, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x3f00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x60}}, 0x0) [ 1084.061554][ T1494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.087796][T31714] Registered IR keymap rc-hauppauge [ 1084.094763][T31714] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1084.107122][T31714] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input131 [ 1084.129980][T31657] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1084.139226][T31657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:39:26 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400}) [ 1084.158369][T31657] usb 3-1: config 0 descriptor?? [ 1084.208004][T31657] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1084.411308][T31714] usb 2-1: USB disconnect, device number 69 17:39:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x618) close(r0) [ 1086.792387][T31657] gspca_sonixj: reg_w err -71 [ 1086.797342][T31657] sonixj: probe of 3-1:0.0 failed with error -71 [ 1086.807918][T31657] usb 3-1: USB disconnect, device number 56 [ 1087.552318][T31657] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1087.912249][T31657] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1087.921520][T31657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.931342][T31657] usb 3-1: config 0 descriptor?? [ 1087.976994][T31657] gspca_main: sonixj-2.14.0 probing 0c45:613e 17:39:30 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 17:39:30 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:39:30 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:39:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) dup2(r1, r0) 17:39:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff00000001) splice(r0, 0x0, r2, 0x0, 0x103fffffd, 0x2) 17:39:30 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x200000}, 0x6, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="02"]) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1088.312138][T31657] gspca_sonixj: reg_w1 err -71 [ 1088.317180][T31657] sonixj: probe of 3-1:0.0 failed with error -71 [ 1088.342427][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1088.357055][T31657] usb 3-1: USB disconnect, device number 57 [ 1088.410385][ T1525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:39:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001000", @ANYRES32=r2, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 17:39:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffb, 0x59, 0x81, @buffer={0x0, 0x7e, &(0x7f0000000300)=""/126}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8ebb4e0489d6052fbe889222fdc9cc63bfe1ca24d93601fc704d2becbdfdb50e5b2f32be169c71a3a559909eee603709f833fa57a294a878b", &(0x7f0000000440)=""/255, 0x1ff, 0x4, 0x2, &(0x7f0000000100)}) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x9e685ac8a8e3a5e9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0x7, 0x2, 0xfffffffd}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 17:39:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r2, 0x5411, 0x70f000) [ 1088.737948][ C1] sd 0:0:1:0: [sg0] tag#2641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1088.747690][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB: Test Unit Ready [ 1088.754389][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.764195][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.773988][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.783834][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.793616][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.803399][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.813216][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.823027][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.832825][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.842620][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.852438][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.862216][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.871935][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 17:39:30 executing program 1: unshare(0x20400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) [ 1088.881759][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.891566][ C1] sd 0:0:1:0: [sg0] tag#2641 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 17:39:31 executing program 5: io_setup(0x4, &(0x7f0000000100)=0x0) r1 = memfd_create(&(0x7f0000000100)='(bdev(&cpusetem0\xb1+-\x00', 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 17:39:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x1}) 17:39:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001000", @ANYRES32=r2, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 17:39:31 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:39:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0xfffffffffffffff5, 0x10, &(0x7f0000000000), 0x13}, 0x48) [ 1089.211059][ C1] sd 0:0:1:0: [sg0] tag#2642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1089.220799][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB: Test Unit Ready [ 1089.227480][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.237264][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.247061][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.256891][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.266657][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.276447][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.286247][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.296049][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 17:39:31 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff00000001) splice(r0, 0x0, r2, 0x0, 0x103fffffd, 0x2) [ 1089.305835][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.315645][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.325424][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.335206][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.345004][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 17:39:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x1}) [ 1089.354793][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.364572][ C1] sd 0:0:1:0: [sg0] tag#2642 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 17:39:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x7530}, {0x306e000000000000}}, 0x0) getitimer(0x2, &(0x7f0000000040)) 17:39:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001000", @ANYRES32=r2, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 17:39:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x1}) 17:39:31 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x93}}) 17:39:31 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:39:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x7530}, {0x306e000000000000}}, 0x0) getitimer(0x2, &(0x7f0000000040)) 17:39:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001000", @ANYRES32=r2, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 17:39:32 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) 17:39:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x7530}, {0x306e000000000000}}, 0x0) getitimer(0x2, &(0x7f0000000040)) 17:39:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x1}) 17:39:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff00000001) splice(r0, 0x0, r2, 0x0, 0x103fffffd, 0x2) 17:39:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf1, 0x12, 0xcf, 0x8, 0x565, 0x3, 0xd29c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc8, 0x4c, 0x9d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:39:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x7530}, {0x306e000000000000}}, 0x0) getitimer(0x2, &(0x7f0000000040)) 17:39:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000001040)='L', 0x1}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) close(r3) 17:39:32 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 17:39:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) 17:39:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) 17:39:32 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00=\x00', @ifru_flags=0x29}) [ 1090.592585][ T3671] usb 3-1: new high-speed USB device number 58 using dummy_hcd 17:39:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = socket(0x2, 0x3, 0xfd) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 17:39:32 executing program 3: r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x8) sendmmsg$inet_sctp(r0, &(0x7f00000033c0)=[{&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8001}}], 0x20}], 0x1, 0x0) [ 1090.692520][ T1642] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 17:39:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) 17:39:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000000004000010000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x84) [ 1090.832871][ T3671] usb 3-1: Using ep0 maxpacket: 8 [ 1090.887437][ T1658] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1090.952898][ T3671] usb 3-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=d2.9c [ 1090.962198][ T3671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.991277][ T3671] usb 3-1: config 0 descriptor?? 17:39:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff00000001) splice(r0, 0x0, r2, 0x0, 0x103fffffd, 0x2) [ 1091.264871][ T3671] kaweth 3-1:0.0: Firmware present in device. [ 1091.462298][ T3671] kaweth 3-1:0.0: Statistics collection: 0 [ 1091.468384][ T3671] kaweth 3-1:0.0: Multicast filter limit: 0 [ 1091.474618][ T3671] kaweth 3-1:0.0: MTU: 0 [ 1091.478943][ T3671] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1092.117936][ T3671] kaweth 3-1:0.0: kaweth interface created at eth25 [ 1092.329814][T31657] usb 3-1: USB disconnect, device number 58 [ 1093.112355][T31657] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1093.362222][T31657] usb 3-1: Using ep0 maxpacket: 8 [ 1093.492473][T31657] usb 3-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=d2.9c [ 1093.501706][T31657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.511336][T31657] usb 3-1: config 0 descriptor?? [ 1093.782433][T31657] kaweth 3-1:0.0: Firmware present in device. [ 1093.822573][T31657] kaweth 3-1:0.0: Statistics collection: 0 17:39:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x30, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_MULTIPATH={0x14, 0x9, {0x8}}, @RTA_OIF={0x8}]}, 0x30}}, 0x0) 17:39:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000100}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1093.828534][T31657] kaweth 3-1:0.0: Multicast filter limit: 0 [ 1093.834837][T31657] kaweth 3-1:0.0: MTU: 0 [ 1093.839247][T31657] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 17:39:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8010000130001002abd7000feffff0000000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08002000070000001800190014000500a3d44019b133879b3915d5ea8dab1b5a08002c00dd010000"], 0x1e8}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 17:39:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) 17:39:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x800, 0x61ce], 0x3, 0x2ab6, 0x0, 0x0, 0x5, 0x8000, {0x0, 0x3, 0xfff8, 0x0, 0x6, 0x1, 0x4, 0x8000, 0x0, 0x0, 0x7, 0xd4, 0x6, 0x3, "ab3f17485f38f82e9c22fc5340000023112b00"}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) ptrace$setsig(0x4203, r2, 0x7ff, &(0x7f00000002c0)={0xc, 0x3ff, 0x8}) 17:39:35 executing program 0: socket$inet6(0xa, 0x801, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x301000) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000001c0)) syz_emit_ethernet(0x72, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x3c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x77585805}, @md5sig={0x13, 0x12, "e7b607b04bf357d2762136ab4f236218"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x2}, @generic={0x0, 0x6, "9dd59663"}]}}}}}}}}, 0x0) [ 1093.912786][T31657] kaweth: probe of 3-1:0.0 failed with error -5 [ 1093.926611][ T1692] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1093.936663][ T1692] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1093.956629][ T1696] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.969040][T31657] usb 3-1: USB disconnect, device number 59 17:39:36 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000000004, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f00000041c0)=0x341) 17:39:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) [ 1094.101782][ T1694] IPVS: ftp: loaded support on port[0] = 21 17:39:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)) 17:39:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x10000, 0x2, {0x100000000000b, @sliced={0x0, [0x0, 0x0, 0x1]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 17:39:36 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000000c0)=0xfffffffffffffefd) 17:39:36 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x4a, 0x24, 0x8d, 0x8, 0x1286, 0x2046, 0x3342, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x2, 0x6}}, {{0x9, 0x5, 0xe, 0x1e}}]}}]}}]}}, 0x0) [ 1094.446778][ T1713] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 17:39:36 executing program 2: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="c666b23b6082b865be4925d6c567df8a748ed9ef4e1eab423a52750121bc4320aeae7d356a46d00361f08fb842cf033ede688243b58e6b4306b3479a6d371c209a756b86b8b4156b2f59869b00aad3826a86699038cbf96c99f4bcb85a090a795b5ca61b239fd841ce3400ea0be5b4db4cdf428019fa809e726f326b1c036ddabe14ba4a85ea7ffdc99b8ffde99f78cbd2e9242845f180507227b6b15fef306584de70ee4cc0ac7e30edf062aaca387962f6e1c229f5afdf66bb1f1b7abf3fcd631eb3328a0d2a6f94bac9ac14757559c0c879766401dc30ddc08eef42fec94e6f2fa3bc2a9821821a51bbe2f322704ef1fb38c03f358b7553abb3d2e21b0bfb189e05d02d751c69712607538ec47b5d44a1363ec590877a3e622f2a54611a0775c261f5cb9d00d5d5f0ff0ae757cc73b79fde16074fc21e2cf092010012ae3147", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) 17:39:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x10000, 0x2, {0x100000000000b, @sliced={0x0, [0x0, 0x0, 0x1]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 1094.790768][ T1726] IPVS: ftp: loaded support on port[0] = 21 17:39:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00\xf3\xad\xe75\xf9\x03\x00AU\xa0\xe1\x94N\xd8\xdfLA\x1e0\x89dm\x10\xb4e\xa6\x91\v\x13', &(0x7f0000000200)=@secondary='builtin_and_secondary_trusted\x00') keyctl$get_persistent(0x16, r1, r3) 17:39:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x10000, 0x2, {0x100000000000b, @sliced={0x0, [0x0, 0x0, 0x1]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 1095.033572][T12204] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1095.292566][T12204] usb 1-1: Using ep0 maxpacket: 8 [ 1095.422475][T12204] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1095.432519][T12204] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1095.442366][T12204] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=33.42 [ 1095.451478][T12204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.461695][T12204] usb 1-1: config 0 descriptor?? [ 1095.505762][T12204] usb 1-1: NFC: intf 0000000071b16eea id 00000000b77edfd9 17:39:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x800, 0x61ce], 0x3, 0x2ab6, 0x0, 0x0, 0x5, 0x8000, {0x0, 0x3, 0xfff8, 0x0, 0x6, 0x1, 0x4, 0x8000, 0x0, 0x0, 0x7, 0xd4, 0x6, 0x3, "ab3f17485f38f82e9c22fc5340000023112b00"}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) ptrace$setsig(0x4203, r2, 0x7ff, &(0x7f00000002c0)={0xc, 0x3ff, 0x8}) 17:39:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) readv(r1, &(0x7f00000021c0)=[{&(0x7f0000000140)=""/79, 0x805}, {&(0x7f00000001c0)=""/4096, 0xfef1}], 0x2) read$FUSE(r1, &(0x7f00000011c0), 0x1000) 17:39:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="290000005200190f00003fffffffda06000004ffffff7fea1100000005000000020000000000000000", 0x29}], 0x1) recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/110, 0x6e}], 0x5, &(0x7f0000001580)=""/189, 0xbd}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 17:39:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x10000, 0x2, {0x100000000000b, @sliced={0x0, [0x0, 0x0, 0x1]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 17:39:37 executing program 2: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="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", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) [ 1095.744054][T12204] usb 1-1: USB disconnect, device number 66 [ 1095.964192][ T1758] IPVS: ftp: loaded support on port[0] = 21 17:39:37 executing program 3: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="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", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) 17:39:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0xffffffffffffffc2}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1096.513427][ T1784] pit: kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 1096.622584][T12204] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1096.643397][ T1784] pit: kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 1096.872277][T12204] usb 1-1: Using ep0 maxpacket: 8 [ 1097.012553][T12204] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1097.022426][T12204] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1097.032239][T12204] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=33.42 [ 1097.041339][T12204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.051082][T12204] usb 1-1: config 0 descriptor?? [ 1097.093393][T12204] usb 1-1: NFC: intf 0000000006128ff5 id 00000000b77edfd9 [ 1097.294660][T12204] usb 1-1: USB disconnect, device number 67 17:39:39 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) connect$netlink(r1, &(0x7f0000000340)=@unspec, 0x3) 17:39:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000640)={0x0, 0x0, 0x2, r2, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x10, 0x0, 0x2, r2, 0x3}) 17:39:39 executing program 2: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="c666b23b6082b865be4925d6c567df8a748ed9ef4e1eab423a52750121bc4320aeae7d356a46d00361f08fb842cf033ede688243b58e6b4306b3479a6d371c209a756b86b8b4156b2f59869b00aad3826a86699038cbf96c99f4bcb85a090a795b5ca61b239fd841ce3400ea0be5b4db4cdf428019fa809e726f326b1c036ddabe14ba4a85ea7ffdc99b8ffde99f78cbd2e9242845f180507227b6b15fef306584de70ee4cc0ac7e30edf062aaca387962f6e1c229f5afdf66bb1f1b7abf3fcd631eb3328a0d2a6f94bac9ac14757559c0c879766401dc30ddc08eef42fec94e6f2fa3bc2a9821821a51bbe2f322704ef1fb38c03f358b7553abb3d2e21b0bfb189e05d02d751c69712607538ec47b5d44a1363ec590877a3e622f2a54611a0775c261f5cb9d00d5d5f0ff0ae757cc73b79fde16074fc21e2cf092010012ae3147", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) 17:39:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x800, 0x61ce], 0x3, 0x2ab6, 0x0, 0x0, 0x5, 0x8000, {0x0, 0x3, 0xfff8, 0x0, 0x6, 0x1, 0x4, 0x8000, 0x0, 0x0, 0x7, 0xd4, 0x6, 0x3, "ab3f17485f38f82e9c22fc5340000023112b00"}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) ptrace$setsig(0x4203, r2, 0x7ff, &(0x7f00000002c0)={0xc, 0x3ff, 0x8}) 17:39:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804}}, 0x14}}, 0x0) 17:39:39 executing program 3: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="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", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) [ 1097.595153][ T1804] input: syz0 as /devices/virtual/input/input132 [ 1097.720293][ T1802] IPVS: ftp: loaded support on port[0] = 21 17:39:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000640)={0x0, 0x0, 0x2, r2, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x10, 0x0, 0x2, r2, 0x3}) 17:39:40 executing program 0: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1098.169481][ T1821] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 17:39:40 executing program 3: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="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", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) 17:39:40 executing program 2: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em1(bdev\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000980)="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", 0x141, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x1ff) close(r2) [ 1098.454633][ T1804] input: syz0 as /devices/virtual/input/input133 17:39:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x1c4, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6=@empty}]}]}, 0x2c}}, 0x0) 17:39:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000640)={0x0, 0x0, 0x2, r2, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x10, 0x0, 0x2, r2, 0x3}) 17:39:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x800, 0x61ce], 0x3, 0x2ab6, 0x0, 0x0, 0x5, 0x8000, {0x0, 0x3, 0xfff8, 0x0, 0x6, 0x1, 0x4, 0x8000, 0x0, 0x0, 0x7, 0xd4, 0x6, 0x3, "ab3f17485f38f82e9c22fc5340000023112b00"}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) ptrace$setsig(0x4203, r2, 0x7ff, &(0x7f00000002c0)={0xc, 0x3ff, 0x8}) 17:39:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x4f}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 17:39:40 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f0200000000ee420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000100004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) [ 1098.973437][ T1855] IPVS: ftp: loaded support on port[0] = 21 17:39:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000640)={0x0, 0x0, 0x2, r2, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x10, 0x0, 0x2, r2, 0x3}) 17:39:41 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{}, {0x801, 0x0, 0x8003f00}]}) 17:39:41 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40084146, 0x400000) 17:39:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syz_tun\x00'}) 17:39:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {}, 0x35}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 17:39:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x24a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x9e685ac8a8e3a5e9, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x0, 0x2) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="2e0000000400000000000000000000000400000000000000db0000000000000006000000000000bcb6f35b00000000000000422fb71359657a7069097bab6681f78085cbad6e17d5860afddd2d13fc47cb9c108636611608e6eec120b6484accb86422249e697de06e98970d3c906cb2"], 0x2e) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 1099.840298][ T1886] input: syz1 as /devices/virtual/input/input134 17:39:42 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40084146, 0x400000) 17:39:42 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:42 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40084146, 0x400000) 17:39:42 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000300)='gre0\x00') 17:39:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@empty, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}) 17:39:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x0, 0x0, 0x32315559}}) 17:39:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x24a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x9e685ac8a8e3a5e9, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x0, 0x2) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="2e0000000400000000000000000000000400000000000000db0000000000000006000000000000bcb6f35b00000000000000422fb71359657a7069097bab6681f78085cbad6e17d5860afddd2d13fc47cb9c108636611608e6eec120b6484accb86422249e697de06e98970d3c906cb2"], 0x2e) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 17:39:43 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40084146, 0x400000) 17:39:43 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x3b) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5, 0xfffffffffffffffd, 0x0, {}, {}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b071f32e410572d3db3e0cc0d0333ed39eb501d8830c5984f2d3e18ed85210a54526cdc405741403ad4f838e815f75f3cd33583c9b3ff5fb558af8d6d639fd36"}}, 0x4010}}, 0x0) 17:39:43 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000380)={0x9, 0x0, {0x0, @link_local, 'ih6_vti0\x00\xf8\xff\x00'}}) 17:39:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f00000000c0), 0x16a) 17:39:43 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000080)=0x9d) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:39:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null)\x00'}, 0x58) 17:39:44 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:44 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:44 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) 17:39:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x24a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x9e685ac8a8e3a5e9, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x0, 0x2) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="2e0000000400000000000000000000000400000000000000db0000000000000006000000000000bcb6f35b00000000000000422fb71359657a7069097bab6681f78085cbad6e17d5860afddd2d13fc47cb9c108636611608e6eec120b6484accb86422249e697de06e98970d3c906cb2"], 0x2e) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 17:39:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x6285e6e) 17:39:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x412) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="a8a0219781b997", 0x7}, {&(0x7f0000000140)="6ac1fd337bf178b67da193d817f4c92610475ac6b20a0dd25f", 0x19}], 0x2, &(0x7f0000000800)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 17:39:44 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:39:44 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002d0d94206d04c108746d0000000109022300010000000009048c0001ff010000091800000000000000080b26b943456489"], 0x0) 17:39:44 executing program 4: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:39:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x60000008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xc3\t\xbb\x0f\xac\x03,') r1 = gettid() tkill(r1, 0x2e) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:39:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x24a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x9e685ac8a8e3a5e9, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x0, 0x2) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="2e0000000400000000000000000000000400000000000000db0000000000000006000000000000bcb6f35b00000000000000422fb71359657a7069097bab6681f78085cbad6e17d5860afddd2d13fc47cb9c108636611608e6eec120b6484accb86422249e697de06e98970d3c906cb2"], 0x2e) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 17:39:44 executing program 4: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 1102.933447][ T2889] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1103.172227][ T2889] usb 6-1: Using ep0 maxpacket: 32 [ 1103.292389][ T2889] usb 6-1: config 0 has an invalid interface number: 140 but max is 0 [ 1103.301020][ T2889] usb 6-1: config 0 has no interface number 0 [ 1103.307273][ T2889] usb 6-1: config 0 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1103.320685][ T2889] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=6d.74 [ 1103.329932][ T2889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.339440][ T2889] usb 6-1: config 0 descriptor?? 17:39:45 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:45 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 17:39:45 executing program 4: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:39:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000000)={r1}, 0x8) 17:39:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(r2, 0x111, 0x2, 0x0, &(0x7f0000000000)) [ 1103.556536][ T2011] device bond1 entered promiscuous mode [ 1103.563469][ T2011] 8021q: adding VLAN 0 to HW filter on device bond1 17:39:45 executing program 4: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 1103.622571][ T2889] usb 6-1: string descriptor 0 read error: -71 [ 1103.629414][ T2889] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 1103.636916][ T2889] uvcvideo: No valid video chain found. [ 1103.695356][ T2889] usb 6-1: USB disconnect, device number 75 [ 1104.352420][ T17] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1104.602202][ T17] usb 6-1: Using ep0 maxpacket: 32 [ 1104.722930][ T17] usb 6-1: config 0 has an invalid interface number: 140 but max is 0 [ 1104.731732][ T17] usb 6-1: config 0 has no interface number 0 [ 1104.738166][ T17] usb 6-1: config 0 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1104.751677][ T17] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=6d.74 [ 1104.760982][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.771179][ T17] usb 6-1: config 0 descriptor?? [ 1105.052890][ T17] usb 6-1: string descriptor 0 read error: -71 [ 1105.059427][ T17] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 1105.066928][ T17] uvcvideo: No valid video chain found. [ 1105.076299][ T17] usb 6-1: USB disconnect, device number 76 17:39:47 executing program 5: r0 = clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(r0, 0x0) 17:39:47 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0xc6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) dup2(r1, r0) 17:39:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:39:47 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) write(r0, &(0x7f0000000500)="aee8a913d28b49e38dfd5ee304", 0xd) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000240), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 17:39:47 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:47 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, &(0x7f0000000440)=""/190, 0xbe) 17:39:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigaction(0x3b, &(0x7f0000000280)={0x0, {}, 0x0, 0x0}, &(0x7f0000000440)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000480)) 17:39:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000017010000030000001fffffff000000001800000000000000170100f50300"/48], 0x30}, 0x0) 17:39:47 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x800000000000011, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x8) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 17:39:47 executing program 5: r0 = clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(r0, 0x0) 17:39:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:39:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)='Y', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x252}]) 17:39:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000004ee8805faf4628c700"/112], 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000040)) [ 1106.131879][ T2075] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 17:39:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7ffe, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)) 17:39:48 executing program 5: r0 = clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(r0, 0x0) [ 1106.173714][ T2075] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 17:39:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_create1(0x80000) 17:39:48 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x400, 0xb) getsockname$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x200000002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff) splice(r4, 0x0, r5, 0x0, 0x400, 0xb) getpeername$inet6(r5, &(0x7f0000000000), &(0x7f0000000040)=0x1c) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1002) 17:39:48 executing program 1: timer_create(0x1, &(0x7f0000000340)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x1, &(0x7f0000000400)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000440)) 17:39:48 executing program 5: r0 = clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(r0, 0x0) 17:39:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x2, 0x803, 0xff) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r1) 17:39:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 17:39:49 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) 17:39:49 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, 0x0}, 0x0) 17:39:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb2, &(0x7f0000000040), &(0x7f00000000c0)=0x3b8c3dfc45cf9699) 17:39:49 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:39:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_create1(0x80000) 17:39:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2289, 0x719000) 17:39:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0xd, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 17:39:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xf0d741) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 17:39:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8, 0x3, 0xfffffffffffffff9}]]}}}]}, 0x40}}, 0x0) 17:39:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb", 0xf2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(r2, &(0x7f00000001c0)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x7006) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:39:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x5, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 1107.859593][ T2148] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 17:39:50 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x1001000, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0xa2ea) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, 0x0, 0x1, r2, 0xe2c1a59609f47730}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000014c0)=""/120, 0x78) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) 17:39:50 executing program 0: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) clone(0x8021020017f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 17:39:50 executing program 1: timerfd_settime(0xffffffffffffffff, 0xd5ad5a7d8837d46, &(0x7f0000000000), 0x0) 17:39:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) fcntl$setpipe(r1, 0x407, 0x20000000) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 17:39:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x23, 0x0, &(0x7f0000000080)) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:39:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_create1(0x80000) 17:39:50 executing program 1: r0 = socket$kcm(0x2, 0x400000000003, 0x2) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000"], 0x14}, 0x0) close(r0) 17:39:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x23, 0x0, &(0x7f0000000080)) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:39:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, [@generic={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x1f7, &(0x7f0000002880)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0x9eb21109aa445960}, 0x48) 17:39:51 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001500)=""/4100, 0x1004) 17:39:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0xf0f03c, 0x0, "c342f0ad01fae0c83a616bbb3030f96167a3a0ebd7b1f14b477cb9a31f2b5df5"}) 17:39:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x23, 0x0, &(0x7f0000000080)) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:39:51 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x1001000, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0xa2ea) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, 0x0, 0x1, r2, 0xe2c1a59609f47730}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000014c0)=""/120, 0x78) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) 17:39:51 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r3, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) ppoll(&(0x7f0000000140)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) 17:39:51 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x2}) 17:39:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000100013070000000000000000a0048e7ce85858807fff227170af2398fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0xf1, 0x0) 17:39:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x23, 0x0, &(0x7f0000000080)) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:39:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_create1(0x80000) 17:39:52 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) setgroups(0x0, 0x0) 17:39:52 executing program 3: unshare(0x20400) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) timerfd_gettime(r0, 0x0) 17:39:52 executing program 5: unshare(0x24000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x40a, 0x0) 17:39:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/213, 0xd5}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0}, 0x6c) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$char_usb(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 17:39:52 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4840, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0xa) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) fstat(r6, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)) fchown(r5, 0x0, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c00020000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) r10 = socket(0x40000000015, 0x5, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 17:39:52 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x116) 17:39:53 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x1001000, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0xa2ea) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, 0x0, 0x1, r2, 0xe2c1a59609f47730}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000014c0)=""/120, 0x78) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) 17:39:53 executing program 3: clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:39:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="d8", @ANYBLOB="000000000000fbdbdf250f000000080002000400040008000600040002001c000200080001000000000004000400080002000000000004000400700004000c00070008000300000000003c000700080004000400000000000100000000000800010000000000080001000000000008"], 0x2}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:39:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, 0x1e, 0x82d, 0x0, 0x0, {0xffffff1f}, [@nested={0x18, 0x1, [@typed={0x8b, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 17:39:53 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="23010000fcf858105e04830225830000000109021b0001000000000904010001020c520009050e000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:39:53 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4840, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0xa) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) fstat(r6, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)) fchown(r5, 0x0, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c00020000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) r10 = socket(0x40000000015, 0x5, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1111.914740][ T2280] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:39:54 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x14}, 0x1c, 0x0}], 0x1, 0x0) [ 1112.182287][ T2889] usb 1-1: new high-speed USB device number 68 using dummy_hcd 17:39:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3) ioctl$TCSETX(r0, 0x5433, 0x0) 17:39:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)='17', 0x2}], 0x1) [ 1112.467682][ T2889] usb 1-1: Using ep0 maxpacket: 16 [ 1112.592605][ T2889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1112.600794][ T2889] usb 1-1: config 0 has no interface number 0 [ 1112.607234][ T2889] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=83.25 [ 1112.616465][ T2889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.693214][ T2889] usb 1-1: config 0 descriptor?? 17:39:54 executing program 5: io_setup(0x9, &(0x7f0000000380)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 17:39:54 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4840, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0xa) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) fstat(r6, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)) fchown(r5, 0x0, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c00020000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) r10 = socket(0x40000000015, 0x5, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 17:39:54 executing program 3: clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1113.248918][ T17] usb 1-1: USB disconnect, device number 68 17:39:55 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x1001000, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0xa2ea) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, 0x0, 0x1, r2, 0xe2c1a59609f47730}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000014c0)=""/120, 0x78) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) 17:39:55 executing program 4: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640), 0x1000000000000345, 0x0) 17:39:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = memfd_create(&(0x7f0000000100)='/dev/snd/seq\x00\x9f\xbd\x1e\x1f\x1eX\x95\x97\x88:iz\x11\x86\x06', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x20000057d) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r3, &(0x7f0000000000)={0x6}, 0x5d4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000200)={0x17e, @time}) 17:39:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4840, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0xa) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) fstat(r6, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)) fchown(r5, 0x0, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c00020000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) r10 = socket(0x40000000015, 0x5, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1114.153241][ T17] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1114.402995][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 1114.532632][ T17] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1114.540957][ T17] usb 1-1: config 0 has no interface number 0 [ 1114.547354][ T17] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=83.25 [ 1114.556572][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.577074][ T17] usb 1-1: config 0 descriptor?? 17:39:56 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) 17:39:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x0, 0x0, [0x9, 0x0, 0x5]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x7, 0x3, 0x200000000000000], 0x100000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:39:56 executing program 3: clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:39:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 17:39:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, r0, 0x8000000000000000) 17:39:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="302600002c00000226bd7000fbdbdf250800000008000500", @ANYRES32, @ANYBLOB="14000c006372633332632d67656e6572696300000800360004007800e8118800eb3c3d1b91498e874970d429f9abcac870e96cc51f6b21788eb57f9cf6f8211d837b5fcaed4e821dd692d036a061973c3a227d9d9d3b8babf414c069bf7418d45baeb404b7af2168458f4d45382ac2a37295cb51c64e2083c0e29774175b954d03584b4fc39658a3da324235139181ba39a48468a5d3545fa14201a7432e97052885875f08351e1f1a6585ce29a93c38797fcba6460db3390cd9ae44b66c45d5d3027d684d7db384fd5e7a76f0a13d6dfccad05e90dd6644643c276a71accba469ad03040015000400800008006200", @ANYRES32, @ANYBLOB="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"/4389, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x9}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x55d00000, 0x10}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1114.892911][ T17] usb 1-1: USB disconnect, device number 69 17:39:57 executing program 1: unshare(0x28020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f00000011c0)=""/4096}, 0x18) [ 1115.098927][ T2362] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:39:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/187) 17:39:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002f02}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @local}}]}, 0x28}}, 0x0) 17:39:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000002440)="0503000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40", 0x4a, 0x0, 0x0, 0x0) 17:39:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') lseek(r0, 0x20408004, 0x0) [ 1115.519760][ T2394] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 17:39:57 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 17:39:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 1115.624535][ T2401] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 17:39:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 17:39:57 executing program 3: clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:39:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000000004000010000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 17:39:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 17:39:57 executing program 2: unshare(0x20400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:39:58 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) 17:39:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 17:39:58 executing program 2: sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="20f314699852c7f81da57684a1672cc894e9197132408a26eac71997d08187d029", 0x21}], 0x1}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc}) 17:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x174, 0x0, 0x1d9, 0x3], [0x3a]}) 17:39:58 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcc, &(0x7f0000000000), 0x3c) 17:39:58 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 17:39:58 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28}, 0x28) [ 1116.391386][ T2440] kvm [2439]: vcpu0, guest rIP: 0xfff0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x3, nop 17:39:58 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 17:39:58 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe4d640500000000004504000000ffffff9704000000000900b704000010000020620700fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 17:39:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x23, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x21) 17:39:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0xfe}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 17:39:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 17:39:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 17:39:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x400000000000003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 17:39:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xfe08) read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d) 17:39:59 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000000)='#+\x00', 0x0) write$eventfd(r3, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:39:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) [ 1117.242296][ T2889] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1117.281176][ T2493] debugfs: File '2488' in directory 'proc' already present! 17:39:59 executing program 4: mkdir(&(0x7f0000001600)='./file1\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) close(r0) close(r1) socketpair$unix(0x1, 0x200000000002, 0x0, &(0x7f0000000100)) shutdown(r0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x20d) 17:39:59 executing program 3: rt_sigsuspend(&(0x7f0000000440), 0x8) [ 1117.330680][ T2493] binder: 2488:2493 ioctl c0306201 20000180 returned -14 17:39:59 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000000)='#+\x00', 0x0) write$eventfd(r3, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1117.522309][ T2889] usb 3-1: Using ep0 maxpacket: 32 17:39:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0x80000001) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000000000000040000fcff00000010000000000000002000000000000000"], 0x24, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 17:39:59 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x1c2, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'.yz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r0) [ 1117.545836][ T2505] debugfs: File '2504' in directory 'proc' already present! [ 1117.605179][ T2505] binder: 2504:2505 ioctl c0306201 20000180 returned -14 [ 1117.646984][ T2514] encrypted_key: keyword 'new' not allowed when called from .update method [ 1117.662591][ T2889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.674194][ T2889] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1117.684173][ T2889] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1117.862726][ T2889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.871949][ T2889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.880322][ T2889] usb 3-1: Product: syz [ 1117.884671][ T2889] usb 3-1: Manufacturer: syz [ 1117.889537][ T2889] usb 3-1: SerialNumber: syz [ 1119.062367][ T2889] cdc_ncm 3-1:1.0: bind() failure [ 1119.071413][ T2889] cdc_ncm 3-1:1.1: bind() failure [ 1119.082236][ T2889] usb 3-1: USB disconnect, device number 60 [ 1119.812466][ T17] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1120.052377][ T17] usb 3-1: Using ep0 maxpacket: 32 17:40:02 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 17:40:02 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000000)='#+\x00', 0x0) write$eventfd(r3, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:40:02 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 17:40:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r6) 17:40:02 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000000080)={&(0x7f000000b500)=@l2, 0x80, 0x0}, 0x40002002) 17:40:02 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x200000004e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb3, &(0x7f0000000280), &(0x7f0000000240)=0x4) [ 1120.463698][ T2541] debugfs: File '2540' in directory 'proc' already present! [ 1120.482868][ T17] usb 3-1: device descriptor read/all, error -71 17:40:02 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000005c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10000, &(0x7f000000a000)) listxattr(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000480)=""/131, 0x16) [ 1120.525066][ T2541] binder: 2540:2541 ioctl c0306201 20000180 returned -14 17:40:02 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000000)='#+\x00', 0x0) write$eventfd(r3, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:40:02 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20}) 17:40:02 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="f8000000000000003a000000d6860000cce66f4c71bdd3514d50924ecf616fd0d1cdfc34ffa0a5d32f61c4222bf5d41c2ca7a10e58397cf471713c2a4d616410c0afe15eb173c1fcfd1bbd147358a8d22d3556d328533714a3f09d93d9a6d247cc8755bfdfc1d2fd412f9b7b9bf70e578cc87b008edeca16dc36e691ed2bd95456fca5eb8a4536d3dbf21d59e7ea1c305388b54dd2a7754b3f86bc9f99f22567ae474592ff07000007d971f057b42f9a2779184a66592e0a4a5df9f4eb717ca55ebe1794c975d2b47e03750193b356f0efe426e0c6738bb24853b5d6ea110896c9cfe5031d6f24da5ae08b8ff0f85a244f47f957231d3258"], 0x108}}], 0x1, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 17:40:02 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x40000007}) dup2(r0, r1) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 1120.753124][ T2562] debugfs: File '2561' in directory 'proc' already present! 17:40:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x1034c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) [ 1120.842280][ T2569] binder: 2561:2569 ioctl c0306201 20000180 returned -14 17:40:03 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30207}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:40:03 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001780)={0x1c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:03 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:40:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000040)={@loopback, @multicast2}, 0x6) 17:40:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 17:40:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000000)={0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x10]}) 17:40:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002440)={{0x12, 0x1, 0x0, 0x3f, 0xc6, 0xe6, 0x8, 0xc52, 0x2102, 0x6fe7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0x13, 0x71, 0xc6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0xac, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0xac, &(0x7f0000000080)={0x0, 0x0, 0x2, '\bD'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, &(0x7f0000000040)={0x0, 0x0, 0x2, "eef7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:40:03 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) 17:40:03 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1121.792229][T21719] usb 4-1: new high-speed USB device number 49 using dummy_hcd 17:40:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)={0xffff}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0) [ 1121.878006][ T2602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1121.892762][ T2602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1122.054200][T21719] usb 4-1: Using ep0 maxpacket: 8 [ 1122.065226][ T2602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:40:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(r1, 0x100000089f0, &(0x7f00000028c0)={'ip6_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 17:40:04 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:40:04 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30207}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:40:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1f}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0) [ 1122.212923][T21719] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 1122.221203][T21719] usb 4-1: config 0 has no interface number 0 [ 1122.227705][T21719] usb 4-1: New USB device found, idVendor=0c52, idProduct=2102, bcdDevice=6f.e7 [ 1122.237208][T21719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.343172][T21719] usb 4-1: config 0 descriptor?? [ 1122.397562][T21719] ftdi_sio 4-1:0.17: FTDI USB Serial Device converter detected [ 1122.406816][T21719] usb 4-1: Detected FT-X 17:40:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0x3472abd886cb49f7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:04 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:40:04 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffff74}], 0x1}, 0x0) r0 = socket(0x10, 0x10000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492573, 0x0) [ 1122.585137][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1122.604756][T21719] ftdi_sio ttyUSB0: Unable to read latency timer: -5 17:40:04 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x20400) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1122.733417][ T2633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1123.265997][T21719] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1123.465078][T31657] usb 4-1: USB disconnect, device number 49 [ 1123.476029][T31657] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1123.486484][T31657] ftdi_sio 4-1:0.17: device disconnected [ 1124.252464][T31657] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1124.492278][T31657] usb 4-1: Using ep0 maxpacket: 8 [ 1124.612561][T31657] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 1124.621037][T31657] usb 4-1: config 0 has no interface number 0 [ 1124.627398][T31657] usb 4-1: New USB device found, idVendor=0c52, idProduct=2102, bcdDevice=6f.e7 [ 1124.636591][T31657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.647124][T31657] usb 4-1: config 0 descriptor?? [ 1124.695431][T31657] ftdi_sio 4-1:0.17: FTDI USB Serial Device converter detected [ 1124.704493][T31657] usb 4-1: Detected FT-X [ 1124.902566][T31657] ftdi_sio ttyUSB0: Unable to read latency timer: -5 17:40:07 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001600)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000001640)) 17:40:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0xa, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 17:40:07 executing program 2: r0 = socket(0x1e, 0x805, 0x0) sendto$inet6(r0, 0x0, 0xf0ff7f, 0x0, 0x0, 0x0) 17:40:07 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30207}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 17:40:07 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) [ 1125.004488][T31657] ftdi_sio 4-1:0.17: GPIO initialisation failed: -71 [ 1125.044155][T31657] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1125.113223][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.121269][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.129170][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.137074][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.144768][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.152886][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.160742][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.168483][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.176170][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.184278][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.191894][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.199598][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.207378][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.215273][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.223125][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.231121][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.238862][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.246591][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.254900][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.262599][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.270310][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.278080][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.284817][ T2666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1125.285747][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.302895][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.310514][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.318216][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.326296][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.333976][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.341644][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.350497][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.358208][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.365916][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.373935][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.377020][ T2671] mmap: syz-executor.4 (2671) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1125.381567][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.402953][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.410614][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.418358][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.419160][T31657] usb 4-1: USB disconnect, device number 50 [ 1125.426556][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.440085][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.447887][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.456095][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.464215][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.471895][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.480452][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.488252][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.496107][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.503854][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 17:40:07 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) [ 1125.511500][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.519282][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.527399][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.535174][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.542892][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.551332][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.559250][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.567023][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.574807][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.583630][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.591343][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.599160][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.606890][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.614597][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.622269][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.629843][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.637750][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.645425][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.653143][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.660726][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.668898][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.676582][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.684285][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.691936][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.699715][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.707390][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 17:40:07 executing program 0: r0 = socket(0x18, 0x0, 0x800000000000002) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) [ 1125.715057][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.722737][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.730316][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.738011][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.745656][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.753372][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 17:40:07 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x15, 0x5f, 0x84, 0x10, 0x547, 0x6801, 0x8b45, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0x35, 0x65}}]}}]}}, 0x0) [ 1125.761069][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.763698][T31657] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1125.768947][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.779093][T31657] ftdi_sio 4-1:0.17: device disconnected [ 1125.785632][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.799507][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.807150][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.815236][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.822872][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.830437][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.838190][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.846099][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.853774][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.862552][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.870147][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.877824][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.885479][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.893582][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.901159][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.908834][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.916513][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.924633][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.932315][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.939870][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.947619][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.955299][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 17:40:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140)=0x4000000, 0x4) [ 1125.963048][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.970803][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.978512][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.986203][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1125.994475][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.002142][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.009826][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.017731][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.025409][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.033095][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.040709][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.048393][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.056002][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.063783][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.071369][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.079105][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.087007][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.094690][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.102330][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.110138][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.118306][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.125985][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.133656][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.141401][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.151092][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.160941][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.168865][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.176560][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.184229][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.192681][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.200264][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.209432][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.217868][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.225563][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.234447][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.243147][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.250687][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.258470][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.266228][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.273843][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.281493][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.289162][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.296750][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.304496][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.312153][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.319726][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.327337][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.335002][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.342652][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.350225][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.357844][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.365426][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.373049][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.380636][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.388274][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.396511][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.404197][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.411786][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.419527][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.427194][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.434943][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.442602][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.450525][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.458179][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 17:40:08 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) [ 1126.465922][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.473647][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.481239][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.488883][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.496964][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.504605][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.512236][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.519940][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.527614][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.535276][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.542930][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.550520][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.558170][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.565842][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.573869][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.581457][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.589129][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.597254][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.604939][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.612624][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.620187][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.627860][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.635528][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.643286][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.651179][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.658846][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 17:40:08 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) [ 1126.666567][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.674596][T21719] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1126.693210][T21719] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1126.706034][ T2666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:40:08 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30207}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:40:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x8d, 0x5, [0xc001020a], [0xc1]}) 17:40:08 executing program 0: r0 = socket(0x18, 0x0, 0x800000000000002) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 17:40:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) [ 1127.012474][T31657] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1127.110777][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.115588][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1127.118503][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.133431][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.142148][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.150439][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.158232][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.165857][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.173772][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.181320][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.188954][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.196726][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.204404][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.211977][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.219878][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.227537][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.235194][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.242840][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.250410][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.258154][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.265756][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.273447][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.280999][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.288595][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.296782][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.304425][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.312021][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.320037][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.327677][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.335728][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.343368][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.350938][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.358596][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.366226][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.373899][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.381606][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.389363][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.397235][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.404890][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 17:40:09 executing program 4: unshare(0x2000400) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r0, 0xc0386106, 0x0) [ 1127.412538][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.420105][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.427753][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.435380][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.443048][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.450652][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.458343][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.465976][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.473580][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.481161][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.488797][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.496440][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.504064][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.511642][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.519270][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.526897][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.534517][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.542169][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.549764][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 17:40:09 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4e, 0xa4, 0x8, 0x5ac, 0x214, 0x476a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x2c, 0x2, 0x0, [], [{{0x9, 0x5, 0xb, 0xb}}]}}]}}]}}, 0x0) [ 1127.557422][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.565057][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.572701][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.580294][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.587957][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.595589][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.603273][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.610857][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.618542][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.626145][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.633764][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.641369][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.649027][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.656651][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.664282][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.671859][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.679525][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.687147][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.694764][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.702384][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.710081][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.717723][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.725350][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.732976][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.740537][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.748163][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.755775][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.755898][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.756011][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.770906][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.785768][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.785889][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.800763][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.808381][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.816061][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.823676][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.831289][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.838964][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.846582][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.854206][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.861761][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.869494][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.877131][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.884769][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.892451][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.899992][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.907683][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.915317][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.923033][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.930628][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.938416][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.946043][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.953662][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.961216][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.968832][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.976472][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.984124][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.991705][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1127.999333][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.006959][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.014568][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.022219][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.029732][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.037352][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.045007][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.052650][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.060171][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.067764][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.075303][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.082916][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.090532][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.098159][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.105814][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.113434][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.120948][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.128562][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.136168][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.143812][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.151411][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.159037][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.166634][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.174285][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.181786][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.189392][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.197024][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.204654][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.212298][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.219861][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.227526][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.235178][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.242817][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.250411][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.258060][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.265725][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.273343][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.280955][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.288595][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.296236][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.303878][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.311462][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.319074][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.326715][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.334345][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.341909][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.349548][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.357199][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.364833][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.372421][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.379958][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.387607][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.395224][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.402844][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.410466][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.418090][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.425723][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.433348][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.440919][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.448559][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.456172][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.463797][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.471365][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.478990][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.486620][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.494265][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.501822][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.509471][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.517095][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.524773][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.532382][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.539919][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.547554][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.555175][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.562793][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.570375][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.578020][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.585665][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.593320][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1128.600829][ T2889] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 17:40:10 executing program 0: r0 = socket(0x18, 0x0, 0x800000000000002) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 17:40:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x1b, 0x0, 0x1d9, 0x4800], [0xc1]}) [ 1128.623338][ T2705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1128.663637][ T2889] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1128.822903][T31657] usb 4-1: Using ep0 maxpacket: 16 [ 1128.972555][T31657] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.45 [ 1128.981856][T31657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.007290][T31657] usb 4-1: config 0 descriptor?? [ 1129.067359][T31657] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1129.266511][T31657] usb 4-1: USB disconnect, device number 51 [ 1130.042274][T31657] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1130.282325][T31657] usb 4-1: Using ep0 maxpacket: 16 [ 1130.412741][T31657] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.45 [ 1130.421983][T31657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.431625][T31657] usb 4-1: config 0 descriptor?? [ 1130.477440][T31657] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1130.681559][T21719] usb 4-1: USB disconnect, device number 52 17:40:12 executing program 3: syz_usb_connect(0x0, 0x38, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xa4, 0xb1, 0x23, 0x8, 0x582, 0xdc95, 0xc3b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x99, 0xc, 0x0, [@uac_as={[@as_header={0x7}]}], [{{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, [@generic={0x4, 0x0, '4w'}]}}]}}]}}]}}, 0x0) 17:40:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 17:40:12 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001200)=""/228) 17:40:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)) 17:40:12 executing program 0: r0 = socket(0x18, 0x0, 0x800000000000002) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 17:40:12 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x65) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0x7530}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "2d0c14c91ef86f03"}}, 0x48}, 0x8}, 0x0) [ 1130.916163][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.924210][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.931887][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.940072][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.947947][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.955833][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.963611][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.971230][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.978971][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.986733][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1130.994508][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.002244][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.009906][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.017684][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.025684][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.033435][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.041072][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.049051][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.056798][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.064581][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.072351][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.079970][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.087704][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.095451][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.103170][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 17:40:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001d80)="ba6c470e81ba959ddbf1c9df69e2abbe6dba9ee8", 0x14}, {&(0x7f0000001ec0)="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", 0x577}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 17:40:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x8}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 1131.110879][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.118854][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.126730][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.134525][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.143434][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.151080][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.158790][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.166536][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.174238][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.176062][ T17] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1131.181833][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.196959][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.204660][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.212305][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.219895][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.227646][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.235357][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.243083][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.250730][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.258432][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 17:40:13 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e, 0x5f, 0x202e]}, 0x3c) [ 1131.266125][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.273838][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.281512][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.289252][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.294026][T21719] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1131.296925][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.311928][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.319682][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.327382][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.335097][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.342777][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.350405][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.358121][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.365810][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.373509][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.381147][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.388879][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.396583][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.404308][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.411945][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.419668][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.427356][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.435061][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.442741][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.450348][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.458062][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.465742][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.473480][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.481106][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.482204][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 1131.488851][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.501390][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.509157][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.516877][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.524585][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.532289][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.539918][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.547703][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.555538][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 17:40:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x0) [ 1131.563284][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.570877][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.578575][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.586284][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.594002][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.601635][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.609431][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.617139][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.622810][ T17] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1131.624900][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.632934][ T17] usb 2-1: config 0 has no interface number 0 [ 1131.640345][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.646434][ T17] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1131.653902][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.664776][ T17] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1131.672290][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.683329][ T17] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1131.690780][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.699773][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.707278][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.707395][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.730391][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.738100][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.745770][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.753450][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.761055][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.768784][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.776533][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.784216][T21719] usb 4-1: Using ep0 maxpacket: 8 [ 1131.784279][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.784393][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.804503][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.812206][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.819834][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.827601][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.835325][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.843182][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.850838][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.858574][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.866278][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.873978][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.881606][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.889329][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.897021][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.904733][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.912442][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 17:40:13 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) [ 1131.920069][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.927788][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.935514][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.942792][T21719] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1131.943216][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.952974][T21719] usb 4-1: New USB device found, idVendor=0582, idProduct=dc95, bcdDevice=c3.b9 [ 1131.960249][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.969331][T21719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.976915][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1131.992470][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.000107][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.007884][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.015592][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.023297][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.030955][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.038689][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.046424][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.054157][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.061808][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.069532][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.077250][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.084973][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.092718][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.100362][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.108091][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.117586][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.125367][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.133088][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.140719][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.148511][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.156206][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.163920][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.171551][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.177392][T21719] usb 4-1: config 0 descriptor?? [ 1132.179263][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.191698][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.199408][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.207101][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.214817][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.222508][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.230119][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.237827][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.245507][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.253217][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.260843][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.264830][ T17] usb 2-1: config 0 descriptor?? [ 1132.268555][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.280972][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.288695][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.296415][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.304133][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.311759][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.319489][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.327264][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.334996][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.342733][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.350421][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.358163][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.365874][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.373109][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1132.373595][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.384832][ T17] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input152 [ 1132.390872][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.408590][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.416304][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.424004][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.431645][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.439372][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.447080][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.454787][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.462542][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.470225][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.477981][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.485744][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.493485][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.501164][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.508862][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 17:40:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x7, 0x4) getsockopt$sock_int(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) [ 1132.516547][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.524216][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.530953][T21719] usb 4-1: USB disconnect, device number 53 [ 1132.531844][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.545550][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.553300][T31657] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1132.711923][ T17] usb 2-1: USB disconnect, device number 70 [ 1132.719970][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1132.816027][T31657] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1133.332442][ T17] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1133.502382][T31657] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1133.572327][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 1133.692556][ T17] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1133.702639][ T17] usb 4-1: New USB device found, idVendor=0582, idProduct=dc95, bcdDevice=c3.b9 [ 1133.711867][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.721768][ T17] usb 4-1: config 0 descriptor?? [ 1133.752353][T31657] usb 2-1: Using ep0 maxpacket: 8 [ 1133.882486][T31657] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1133.890701][T31657] usb 2-1: config 0 has no interface number 0 [ 1133.897089][T31657] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1133.908124][T31657] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1133.919593][T31657] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1133.928777][T31657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.938543][T31657] usb 2-1: config 0 descriptor?? [ 1133.964260][ T2889] usb 4-1: USB disconnect, device number 54 [ 1133.997720][T31657] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1134.009667][T31657] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input153 17:40:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17:40:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) [ 1134.198058][ T2889] usb 2-1: USB disconnect, device number 71 [ 1134.214995][ T2889] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 17:40:16 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001200)=""/228) 17:40:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 17:40:16 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 17:40:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) 17:40:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="b8010000000f01d9c74424000f000100c744240200500000c7442406000000000f0114240f22a4660f3881290fc7b047d500000f01cf0f08b9800000c00f3235000800000f300f07c4e1fd50c1", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) [ 1134.396174][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.404017][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.411662][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.419408][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.427290][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.434914][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.442669][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.450222][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.457849][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.465487][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.473104][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.480648][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.488291][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.495978][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.503616][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.511154][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.516601][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1134.518785][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.533456][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.541000][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.548646][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.556247][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.557688][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1134.566074][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.578554][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.586139][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.593750][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.601291][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.608898][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.616707][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.624430][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.632021][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.639684][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.647330][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.654974][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.662636][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.667746][ T2808] device bridge_slave_0 left promiscuous mode [ 1134.670214][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.679886][ T2808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.683877][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.698457][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.706147][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.714021][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.721658][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.729414][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.737173][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.744986][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.752703][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.760331][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.768106][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.775858][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.783623][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.791260][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.798989][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.806672][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.814407][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.822171][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.829794][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.837550][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.845267][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.853036][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.860667][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.868397][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.876085][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.883789][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.891440][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.899180][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.906885][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.914599][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.922329][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.929990][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.937749][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 17:40:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) [ 1134.945481][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.953213][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.960874][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.968652][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.976355][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.984120][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.991836][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1134.999562][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.007252][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.014989][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.022715][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.030314][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.038006][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.045665][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.054179][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.061779][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.069572][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.077226][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.084993][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.092714][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.100345][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.108101][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.115826][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.123579][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.131177][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.138845][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.146454][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.154133][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.161717][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.169401][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.177119][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.184882][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.192609][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.200176][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.207872][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.215578][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.223310][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.230891][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.238571][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.246263][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.254256][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.261847][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.269548][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.277284][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.284953][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.292661][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.300214][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.307903][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.315598][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.323303][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.330869][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.338484][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.346111][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.353894][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.361536][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.369272][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.376908][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.384622][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.392424][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.400095][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.407814][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.415489][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.423271][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.430895][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.438613][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.446334][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.454101][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.461717][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.469465][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.477091][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.484742][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.492438][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.500026][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.507908][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.515721][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.523634][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.531248][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.538937][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.546565][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.554272][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.561902][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.569603][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.577247][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.586617][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.594363][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.601922][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.609636][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.617339][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.624997][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.632701][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.640203][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.647807][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.655385][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.663023][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.670596][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.678269][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.685812][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.693495][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.701021][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.708621][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.716216][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.723868][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.731407][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.739020][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.746599][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.754201][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.761720][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.769347][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.776997][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.784646][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.792275][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.799974][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.807615][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.815324][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.822952][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.830458][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.838098][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.845667][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.853307][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.862634][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.870151][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.877974][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.885643][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.893316][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.900855][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.908519][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.916127][ T17] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1135.929512][ T17] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1135.957710][ T2808] device bridge_slave_1 left promiscuous mode [ 1135.964558][ T2808] bridge0: port 2(bridge_slave_1) entered disabled state 17:40:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x03z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0xa}}) [ 1136.030453][ T2808] bond0: (slave bond_slave_0): Releasing backup interface 17:40:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @rand_addr=0x7}, @in={0x2, 0x0, @remote}], 0x20) 17:40:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_setup(0x2, &(0x7f0000000200)) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x80ffff}]}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={0x0, 0x0, 0x2080}) [ 1136.222220][ T17] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1136.249004][ T2808] team0: Port device team_slave_0 removed [ 1136.354894][ T2808] team0: Port device team_slave_1 removed 17:40:18 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 17:40:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635008000000f30baf80c66b88879da8a66efbafc0c66ed660f3881ba80a866b9160b00000f3266b93806000066b85400000066ba000000000f302a150f3804969aef0f01c20f84c600bad104b80098ef", 0x59}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000002c0)=ANY=[@ANYBLOB="05"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1136.462951][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 1136.582747][ T17] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1136.591005][ T17] usb 2-1: config 0 has no interface number 0 [ 1136.597353][ T17] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1136.608428][ T17] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1136.619999][ T17] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1136.629307][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.662923][ T17] usb 2-1: config 0 descriptor?? [ 1136.711463][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1136.723521][ T17] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input154 [ 1136.853707][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1136.949993][ T17] usb 2-1: USB disconnect, device number 72 [ 1136.956407][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1136.967362][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 17:40:19 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001200)=""/228) 17:40:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) 17:40:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000030705"], 0x7}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:40:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xa0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x74, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_OKEY={0x8}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_OKEY={0xfffffda4}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}, @IFLA_VTI_REMOTE={0x8}, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_FWMARK={0xffffffffffffff57}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0xa0}}, 0x0) 17:40:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@polexpire={0xcc, 0x1b, 0xe01, 0x0, 0x0, {{{@in, @in=@loopback}}}, [@mark={0xc}]}, 0xcc}}, 0x0) 17:40:19 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) [ 1137.878728][ T2865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1137.967631][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:40:20 executing program 4: r0 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x69d6bafb4a748e07}}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:40:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "3998"}, 0xd) [ 1138.102524][ T17] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1138.342463][ T17] usb 2-1: Using ep0 maxpacket: 8 17:40:20 executing program 0: unshare(0x20040600) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) 17:40:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x2, 0x0, 0x0, 0x1, 0x0}}) [ 1138.487137][ T17] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1138.495524][ T17] usb 2-1: config 0 has no interface number 0 [ 1138.503212][ T17] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1138.514305][ T17] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1138.526579][ T17] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1138.535813][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:40:20 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 17:40:20 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000240), 0x26e) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x1200000000000000, 0x0, 0x7000000, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="035db86376863a68fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x29}], 0x1}, 0x0) [ 1138.693413][ T17] usb 2-1: config 0 descriptor?? [ 1138.748367][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1138.761605][ T17] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input155 [ 1139.058172][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1139.258653][ T17] usb 2-1: USB disconnect, device number 73 [ 1139.273383][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 17:40:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000100)=0x20) 17:40:21 executing program 0: unshare(0x20040600) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) 17:40:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0xb0001}) ioctl$KVM_SMI(r2, 0xaeb7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x80000001, 0x0, 0x5}, 0x10) 17:40:21 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001200)=""/228) 17:40:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) 17:40:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x2c8}}, 0x0) 17:40:22 executing program 0: unshare(0x20040600) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) [ 1139.950176][ T2907] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:40:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x80000001, 0x0, 0x5}, 0x10) 17:40:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1140.125943][ T2921] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1140.135375][ T2921] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 17:40:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x80000001, 0x0, 0x5}, 0x10) [ 1140.192311][ T2889] usb 2-1: new high-speed USB device number 74 using dummy_hcd 17:40:22 executing program 0: unshare(0x20040600) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) 17:40:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2}, 0x8) [ 1140.275881][ T2930] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1140.285099][ T2930] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1140.432340][ T2889] usb 2-1: Using ep0 maxpacket: 8 [ 1140.552566][ T2889] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1140.560848][ T2889] usb 2-1: config 0 has no interface number 0 [ 1140.567254][ T2889] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1140.580164][ T2889] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1140.591567][ T2889] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1140.601205][ T2889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.616277][ T2889] usb 2-1: config 0 descriptor?? [ 1140.658115][ T2889] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1140.671042][ T2889] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input156 [ 1140.861331][ T17] usb 2-1: USB disconnect, device number 74 [ 1140.872381][ T17] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 17:40:23 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x638, 0x141001) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='Z', 0x1}], 0x1) 17:40:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0xefb}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0xfffffffd}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xcc}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x80000001, 0x0, 0x5}, 0x10) 17:40:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_mreq(r0, 0x29, 0x8000000001b, &(0x7f0000000040)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "833132", 0x14, 0xe, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, @remote, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:40:23 executing program 4: r0 = memfd_create(&(0x7f0000000000)='lan1nodev\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03D\x82K\x10\x89\x8eV\xc5\xa9\xf2\x8f\x8b\x80\xb7s\x8bA\x1a\x9e\x96g\x8e\xc8\xfe\xf8\xde\x9e:P\x92C\x90K K\xcd\xdf\xdc{\xb2wR\xefSVZ%\x16\x8a\xd6\xc1\x93\x01C\x11\x9c\xfa\x9e\xd7tY\xab\xc7,Gw\x87HjB$\xf7\xd9H>\xdf4\xc6\x15S\xa9\xba\xa6\xb0U\a\x91\xab\xf8\xdd\x92|:\xb9\xa6\x06\xce\x19\xc2{Hh\x8e\xc2\v\xfbq\x111h \xe1\xea\x98VAZ\xc8(n9z3\xc9\xfc\x91\xa7\xe8\xdf\xd0J\xde\x95>\x06', 0x6) fallocate(r0, 0x20, 0x0, 0xeb96) 17:40:23 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000081c1b341b000000000001090224000100000000090400000002000000090400000001222900090581030000000000"], 0x0) 17:40:23 executing program 4: mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20000000fb], 0x1f004, 0x485}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1141.783889][ T2959] kvm: pic: non byte read [ 1141.798602][ T2959] kvm: pic: non byte write [ 1141.822842][ T17] usb 2-1: new high-speed USB device number 75 using dummy_hcd 17:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) [ 1141.842871][ T2959] kvm: pic: non byte read 17:40:23 executing program 0: open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[]}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @rand_addr=0x8000, @local}, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000040)) [ 1141.865804][ T2959] kvm: pic: non byte write [ 1141.903929][ T2959] kvm: pic: non byte read [ 1141.951207][ T2959] kvm: pic: non byte write [ 1141.989089][ T2959] kvm: pic: non byte read 17:40:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) [ 1142.026865][ T2959] kvm: pic: non byte write [ 1142.052446][ T2959] kvm: pic: non byte read [ 1142.067809][ T2959] kvm: pic: non byte write [ 1142.082275][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 1142.093228][ T2959] kvm: pic: non byte read [ 1142.125838][ T2959] kvm: pic: non byte write [ 1142.163960][ T2959] kvm: pic: non byte read [ 1142.179362][ T2959] kvm: pic: non byte write [ 1142.202442][ T17] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1142.211938][ T17] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1142.221333][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.231723][ T2959] kvm: pic: single mode not supported [ 1142.231739][ T2959] kvm: pic: level sensitive irq not supported [ 1142.305102][ T17] usb 2-1: config 0 descriptor?? 17:40:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 17:40:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000000}, [@ldst={0x6, 0x5, 0x2000cf66, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 17:40:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) 17:40:24 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f, 0x80ffff]}, 0x2c) [ 1142.557232][ T2889] usb 2-1: USB disconnect, device number 75 [ 1143.342221][ T17] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1143.582389][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 1143.702445][ T17] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1143.711738][ T17] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1143.721196][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.730503][ T17] usb 2-1: config 0 descriptor?? [ 1143.984289][ T2889] usb 2-1: USB disconnect, device number 76 17:40:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12e) read(r2, &(0x7f0000000180)=""/20, 0x14) 17:40:26 executing program 4: mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40203, 0x0) 17:40:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7ff) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1011, r1, 0x0) 17:40:26 executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:40:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 17:40:26 executing program 3: syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @processing_unit={0x8, 0x24, 0x7, 0x0, 0x2, 0x0, "89"}, @output_terminal={0x9, 0x24, 0x3, 0x7c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:40:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0xc00000) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x16) [ 1144.588321][T21719] hid-generic 0000:0000:0000.0044: ignoring exceeding usage max 17:40:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() socket(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x105, 0x0) [ 1144.670859][T21719] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on sz1 17:40:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffed, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001e000502ed0080637e6394f20100d2000500fcb711407f480f003d0000f8000002000000f88000f01700", 0x2e}], 0x1}, 0x0) [ 1144.727803][ T17] hid-generic 0000:0000:0000.0045: ignoring exceeding usage max [ 1144.812286][ T2889] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1144.814884][ T17] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1144.870898][ T3034] netlink: 'syz-executor.5': attribute type 61 has an invalid length. [ 1144.902426][T21719] usb 1-1: new full-speed USB device number 70 using dummy_hcd 17:40:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002b40)=""/4096}], 0x0, &(0x7f0000003b80)=""/195}}], 0x40000f7, 0x60, 0x0) 17:40:27 executing program 1: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc0) [ 1145.062792][ T2889] usb 4-1: Using ep0 maxpacket: 8 17:40:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0xc, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) semtimedop(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000300)) 17:40:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="c2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1145.183036][ T2889] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1145.194357][ T2889] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:40:27 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8b, 0x33, 0xea, 0x8, 0x3eb, 0x2, 0x4a2d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x72, 0x77, 0x55, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002b40)) [ 1145.262766][T21719] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 1145.271059][T21719] usb 1-1: config 0 has no interface number 0 [ 1145.277655][T21719] usb 1-1: config 0 interface 39 altsetting 0 has an invalid endpoint with address 0x65, skipping [ 1145.288595][T21719] usb 1-1: New USB device found, idVendor=182d, idProduct=0269, bcdDevice=e3.83 [ 1145.297833][T21719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.337580][T21719] usb 1-1: config 0 descriptor?? [ 1145.375866][ T2889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.385128][ T2889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.386264][T21719] usb 1-1: USB2VGA dongle found at address 70 [ 1145.393404][ T2889] usb 4-1: Product: syz [ 1145.403745][ T2889] usb 4-1: Manufacturer: syz [ 1145.408459][ T2889] usb 4-1: SerialNumber: syz 17:40:27 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x82, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x40) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 1145.426531][T21719] usb 1-1: Allocated 8 output buffers [ 1145.432257][T21719] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 1145.593687][T21719] usb 1-1: USB disconnect, device number 70 [ 1145.639651][ T17] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1145.831888][ T2889] usb 4-1: USB disconnect, device number 55 [ 1145.885110][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 1146.002994][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.013613][ T17] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1146.023130][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.033195][ T17] usb 2-1: config 0 descriptor?? [ 1146.077131][ T17] Registered IR keymap rc-hauppauge [ 1146.084383][ T17] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1146.096455][ T17] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input157 [ 1146.278095][T12204] usb 2-1: USB disconnect, device number 77 [ 1146.382385][T21719] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1146.462345][ T17] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1146.702417][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 1146.752366][T21719] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 1146.760692][T21719] usb 1-1: config 0 has no interface number 0 [ 1146.767157][T21719] usb 1-1: config 0 interface 39 altsetting 0 has an invalid endpoint with address 0x65, skipping [ 1146.777905][T21719] usb 1-1: New USB device found, idVendor=182d, idProduct=0269, bcdDevice=e3.83 [ 1146.787202][T21719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.796913][T21719] usb 1-1: config 0 descriptor?? [ 1146.832452][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1146.844236][ T17] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1146.859697][T21719] usb 1-1: USB2VGA dongle found at address 71 [ 1146.870781][T21719] usb 1-1: Allocated 8 output buffers [ 1146.876594][T21719] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 1147.012378][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1147.021602][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.030032][ T17] usb 4-1: Product: syz [ 1147.034798][ T17] usb 4-1: Manufacturer: syz [ 1147.039476][ T17] usb 4-1: SerialNumber: syz [ 1147.049773][T31657] usb 1-1: USB disconnect, device number 71 [ 1147.103109][ T2889] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1147.342192][ T2889] usb 2-1: Using ep0 maxpacket: 8 [ 1147.411223][ T17] usb 4-1: USB disconnect, device number 56 [ 1147.473780][ T2889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.484571][ T2889] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1147.493805][ T2889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.504354][ T2889] usb 2-1: config 0 descriptor?? 17:40:29 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="93044698a312", [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x1, 0x21, 0x0, @rand_addr="d9a961a56b28d9b6340b6c1f63d3d8d7", @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @tipc=@payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) 17:40:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @dev}}, {{0xa, 0x0, @broadcast}}]}, 0x190) 17:40:29 executing program 5: r0 = socket$packet(0x11, 0x4000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r1, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) close(r9) r10 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xff40) splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0) 17:40:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) [ 1147.549047][ T2889] Registered IR keymap rc-hauppauge [ 1147.555878][ T2889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1147.568107][ T2889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input158 [ 1147.668576][ T3095] dccp_invalid_packet: pskb_may_pull failed [ 1147.699278][ T3091] device veth11 entered promiscuous mode [ 1147.706545][ T3095] dccp_invalid_packet: pskb_may_pull failed [ 1147.746969][ T3090] device veth11 left promiscuous mode [ 1147.797466][ T3091] device veth11 entered promiscuous mode [ 1147.834304][ T2889] usb 2-1: USB disconnect, device number 78 [ 1147.884923][ T3090] device veth11 left promiscuous mode 17:40:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0xf, 0x0, &(0x7f0000002000)) 17:40:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001b}]}) 17:40:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x3c) 17:40:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x81) ioctl$USBDEVFS_SUBMITURB(r0, 0x5522, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 17:40:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:40:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @empty}}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0xfe9a) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x2}, 0x1c) socket(0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000040)=""/114) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x368, 0x478, 0x160, 0x368, 0x160, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@broadcast, 0x4, 0xb, 0x7}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0x3f}}}, {{@ipv6={@loopback, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0x0, 0xffffffff, 0xffffff00], 'lapb0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x3, 0x0, 0x60}, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@remote, 0x3f, 0x0, 0xfe01}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) sendto$packet(r2, &(0x7f00000000c0), 0xfffffffffffffd4d, 0x1, 0x0, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 17:40:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) dup2(r0, r2) 17:40:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 17:40:30 executing program 3: unshare(0x2000400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x323000, 0x0) mq_getsetattr(r0, 0x0, 0x0) 17:40:30 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:40:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30004000c8004ff", 0x2e}], 0x1}, 0x0) 17:40:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)=0x400000) 17:40:30 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:40:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) dup2(r0, r2) 17:40:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'lo\x00'}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'lo\x00', 0x6a}) 17:40:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30004000c8004ff", 0x2e}], 0x1}, 0x0) 17:40:30 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:40:31 executing program 5: r0 = socket$inet6(0x10, 0x80000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffff26, &(0x7f0000000440)=[{&(0x7f00000000c0)="5500000018007f7000fe01b2a4a280930a60000000a843029100000039000900230008d6000000000d000500fc637400e34f04251a3ad5570800c78b80082314e9030b9d111185b1766732009b84e7b1df136ef75a", 0x55}], 0x1}, 0x0) 17:40:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'lo\x00'}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'lo\x00', 0x6a}) 17:40:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) dup2(r0, r2) 17:40:31 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe3, 0x4b, 0x84, 0x8, 0x41e, 0x4011, 0x48a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x2e, 0xa4}}]}}]}}, 0x0) 17:40:31 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:40:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30004000c8004ff", 0x2e}], 0x1}, 0x0) 17:40:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30004000c8004ff", 0x2e}], 0x1}, 0x0) 17:40:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'lo\x00'}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'lo\x00', 0x6a}) 17:40:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) dup2(r0, r2) 17:40:31 executing program 1: syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235001000000f30c422d9bb5294b977080000b8b97e0000ba000000000f300f20e035040000000f22e02e0f216d65672e64400fc73ec74424003d000000c744240200800000c7442406000000000f011c240f791b440f79d8b9f70b00000f32", 0x66}], 0x14e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x2, 0x0, 0x0, 0x800000000]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x8, 0x9, 0x9, 0x91]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x1e, 0x829, 0x0, 0x0, {0x13}, [@nested={0x28, 0xe, [@generic="8eddd36effa3a448252030fb3f4c6baa58064cf61e9b60103bfc28a5f8cd3536d3"]}]}, 0x3c}, 0x1, 0x6087ffffffff}, 0x0) [ 1149.512869][ T2889] usb 3-1: new high-speed USB device number 63 using dummy_hcd 17:40:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) bind$isdn(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) [ 1149.578936][ T3197] kvm [3194]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000075 [ 1149.603526][ T3197] kvm [3194]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000032 17:40:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'lo\x00'}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'lo\x00', 0x6a}) [ 1149.680674][ T3206] IPVS: ftp: loaded support on port[0] = 21 17:40:31 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "cc090000006e8e59"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}}], 0x400000000000361, 0x8002, 0x0) 17:40:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x47deb4d77ed6b8d1, 0x0, [], @value64}}) [ 1149.757203][ T3197] kvm [3194]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000075 [ 1149.804068][ T2889] usb 3-1: Using ep0 maxpacket: 8 [ 1149.944520][ T2889] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=48.a0 [ 1149.953983][ T2889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.975373][ T3212] IPVS: ftp: loaded support on port[0] = 21 [ 1150.008168][ T2889] usb 3-1: config 0 descriptor?? [ 1150.063224][ T2889] pwc: Creative Labs Webcam Pro Ex detected. [ 1150.262531][ T2889] pwc: recv_control_msg error -71 req 06 val 3700 [ 1150.282327][ T2889] pwc: Failed to set LED on/off time (-71) [ 1150.302514][ T2889] pwc: send_video_command error -71 [ 1150.307855][ T2889] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1150.316353][ T2889] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1150.325648][ T2889] usb 3-1: USB disconnect, device number 63 [ 1151.032270][ T17] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1151.274492][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1151.392475][ T17] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=48.a0 [ 1151.401782][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.411536][ T17] usb 3-1: config 0 descriptor?? [ 1151.477103][ T17] pwc: Creative Labs Webcam Pro Ex detected. [ 1151.688236][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 1151.712651][ T17] pwc: Failed to set LED on/off time (-71) [ 1151.742843][ T17] pwc: send_video_command error -71 [ 1151.748373][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1151.756304][ T17] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1151.766556][ T17] usb 3-1: USB disconnect, device number 64 17:40:34 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe3, 0x4b, 0x84, 0x8, 0x41e, 0x4011, 0x48a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x2e, 0xa4}}]}}]}}, 0x0) 17:40:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000068, 0x0) 17:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7d, &(0x7f0000000000), 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:40:34 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo\x00') fchdir(r1) exit(0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30}, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:40:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f0000000740)="200000001a000100000000000000a00080020000010000000000070000002000", 0x20) 17:40:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7d, &(0x7f0000000000), 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:40:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0x2f) 17:40:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7d, &(0x7f0000000000), 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1152.592367][ T17] usb 3-1: new high-speed USB device number 65 using dummy_hcd 17:40:34 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 17:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7d, &(0x7f0000000000), 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1152.852541][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1153.002585][ T17] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=48.a0 [ 1153.013302][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.079633][ T17] usb 3-1: config 0 descriptor?? [ 1153.137319][ T17] pwc: Creative Labs Webcam Pro Ex detected. [ 1153.362528][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 1153.382445][ T17] pwc: Failed to set LED on/off time (-71) [ 1153.402299][ T17] pwc: send_video_command error -71 [ 1153.407747][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1153.415933][ T17] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1153.426673][ T17] usb 3-1: USB disconnect, device number 65 17:40:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe3, 0x4b, 0x84, 0x8, 0x41e, 0x4011, 0x48a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x2e, 0xa4}}]}}]}}, 0x0) 17:40:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0xefb}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259b769a, 0x0, 0xfffffffd}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x200, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x44}}, 0x0) 17:40:35 executing program 3: syz_usb_connect(0x0, 0xd8, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x28, 0xf2, 0x45, 0x20, 0x7c4, 0xa109, 0x727f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x1, 0x2c, 0x46, 0x6e, 0x0, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x23, 0xff, 0x0, "c8d92601f933"}]}, @generic={0x9d, 0x0, "1d97235b8a3c71248a02c330bb29e74910cd753ff26e080e51f9c37e0e8c8ce74238033a042210f6886a01d0bf768b54da15020063ab1577ea80bcdece8a226a36f7f7ddeca38b7984acf01747f4583a9c7c212d54530ab52b2b728f6b988c804287cb676676f02742e4175af6bcd777da528dd7896467e7dcbb21409a006d1f8700ba737d83efe21f243424cd69dea2c57eed690c0426fd94b6dd"}], [{{0x9, 0x5, 0x87, 0x22b7158b3ece356f, 0x0, 0x0, 0x20, 0xc1}}]}}]}}]}}, 0x0) 17:40:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x400, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc0d05604, &(0x7f00000001c0)={0x2}) 17:40:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x48f}]}) [ 1153.936569][ T3277] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) 17:40:36 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x201526d0) [ 1154.005723][ T3283] picdev_read: 54 callbacks suppressed [ 1154.005738][ T3283] kvm: pic: non byte read 17:40:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 1154.063210][ T3283] picdev_write: 54 callbacks suppressed [ 1154.063226][ T3283] kvm: pic: non byte write [ 1154.096649][ T3283] kvm: pic: level sensitive irq not supported [ 1154.096923][ T3283] kvm: pic: non byte read [ 1154.126119][ T3283] kvm: pic: non byte write 17:40:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x48f}]}) [ 1154.157239][ T3283] kvm: pic: level sensitive irq not supported [ 1154.157496][ T3283] kvm: pic: non byte read [ 1154.194753][ T3283] kvm: pic: non byte write [ 1154.200233][ T3283] kvm: pic: level sensitive irq not supported [ 1154.200493][ T3283] kvm: pic: non byte read [ 1154.213975][ T2889] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1154.255296][ T17] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1154.269021][ T3283] kvm: pic: non byte write [ 1154.311949][ T3283] kvm: pic: level sensitive irq not supported [ 1154.315689][ T3283] kvm: pic: non byte read [ 1154.356250][ T3283] kvm: pic: non byte write [ 1154.376570][ T3283] kvm: pic: level sensitive irq not supported [ 1154.377790][ T3283] kvm: pic: non byte read 17:40:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x48f}]}) 17:40:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 1154.424072][ T3283] kvm: pic: non byte write [ 1154.441219][ T3283] kvm: pic: level sensitive irq not supported [ 1154.441492][ T3283] kvm: pic: non byte read [ 1154.467217][ T3283] kvm: pic: non byte write [ 1154.500604][ T3283] kvm: pic: level sensitive irq not supported [ 1154.501012][ T3283] kvm: pic: non byte read [ 1154.502565][ T2889] usb 4-1: Using ep0 maxpacket: 32 [ 1154.508599][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1154.552476][ T3283] kvm: pic: non byte write [ 1154.603823][ T3283] kvm: pic: level sensitive irq not supported [ 1154.604085][ T3283] kvm: pic: non byte read [ 1154.642833][ T2889] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1154.653294][ T2889] usb 4-1: config 0 has no interface number 0 [ 1154.659566][ T2889] usb 4-1: config 0 interface 47 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1154.671101][ T2889] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=72.7f [ 1154.680348][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.683613][ T17] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=48.a0 [ 1154.698537][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.719612][ T3283] kvm: pic: non byte write [ 1154.753758][ T17] usb 3-1: config 0 descriptor?? [ 1154.797860][ T17] pwc: Creative Labs Webcam Pro Ex detected. 17:40:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x48f}]}) [ 1154.913343][ T2889] usb 4-1: config 0 descriptor?? [ 1154.957955][ T2889] ums-datafab 4-1:0.47: USB Mass Storage device detected [ 1155.022827][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 1155.043184][ T17] pwc: Failed to set LED on/off time (-71) [ 1155.064882][ T17] pwc: send_video_command error -71 [ 1155.070492][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1155.079199][ T17] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1155.085463][ T2889] ums-sddr55 4-1:0.47: USB Mass Storage device detected [ 1155.131585][ T17] usb 3-1: USB disconnect, device number 66 [ 1155.190768][ T2889] usb 4-1: USB disconnect, device number 57 17:40:37 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe3, 0x4b, 0x84, 0x8, 0x41e, 0x4011, 0x48a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x2e, 0xa4}}]}}]}}, 0x0) 17:40:37 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x201526d0) 17:40:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 1155.862334][ T17] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1155.932546][ T2889] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1156.102194][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1156.172253][ T2889] usb 4-1: Using ep0 maxpacket: 32 [ 1156.222433][ T17] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=48.a0 [ 1156.232412][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.244028][ T17] usb 3-1: config 0 descriptor?? [ 1156.287287][ T17] pwc: Creative Labs Webcam Pro Ex detected. [ 1156.322373][ T2889] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1156.331811][ T2889] usb 4-1: config 0 has no interface number 0 [ 1156.339574][ T2889] usb 4-1: config 0 interface 47 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1156.351578][ T2889] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=72.7f [ 1156.362129][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.373418][ T2889] usb 4-1: config 0 descriptor?? [ 1156.415211][ T2889] ums-datafab 4-1:0.47: USB Mass Storage device detected [ 1156.463519][ T2889] ums-sddr55 4-1:0.47: USB Mass Storage device detected [ 1156.492514][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 1156.512393][ T17] pwc: Failed to set LED on/off time (-71) [ 1156.532713][ T17] pwc: send_video_command error -71 [ 1156.538053][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1156.547959][ T17] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1156.557570][ T17] usb 3-1: USB disconnect, device number 67 [ 1156.615527][ T2889] usb 4-1: USB disconnect, device number 58 17:40:38 executing program 3: syz_usb_connect(0x0, 0xd8, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x28, 0xf2, 0x45, 0x20, 0x7c4, 0xa109, 0x727f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x1, 0x2c, 0x46, 0x6e, 0x0, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x23, 0xff, 0x0, "c8d92601f933"}]}, @generic={0x9d, 0x0, "1d97235b8a3c71248a02c330bb29e74910cd753ff26e080e51f9c37e0e8c8ce74238033a042210f6886a01d0bf768b54da15020063ab1577ea80bcdece8a226a36f7f7ddeca38b7984acf01747f4583a9c7c212d54530ab52b2b728f6b988c804287cb676676f02742e4175af6bcd777da528dd7896467e7dcbb21409a006d1f8700ba737d83efe21f243424cd69dea2c57eed690c0426fd94b6dd"}], [{{0x9, 0x5, 0x87, 0x22b7158b3ece356f, 0x0, 0x0, 0x20, 0xc1}}]}}]}}]}}, 0x0) 17:40:38 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) sendmmsg$unix(r0, &(0x7f0000001000)=[{&(0x7f0000000340)=@abs, 0x6e, 0x0}], 0x3a7, 0x0) 17:40:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) 17:40:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) 17:40:38 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x201526d0) 17:40:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0xf0ffff, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 17:40:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) 17:40:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) 17:40:39 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1157.272623][ T2889] usb 4-1: new high-speed USB device number 59 using dummy_hcd 17:40:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) [ 1157.513263][ T2889] usb 4-1: Using ep0 maxpacket: 32 [ 1157.642578][ T2889] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1157.650961][ T2889] usb 4-1: config 0 has no interface number 0 [ 1157.657748][ T2889] usb 4-1: config 0 interface 47 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1157.670140][ T2889] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=72.7f [ 1157.679953][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:40:39 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x295, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x2b2}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0xb4}, {&(0x7f0000000200)=""/77, 0x1c4}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f00000008c0)=""/198, 0x3d6}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:40:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xa0001, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1157.871594][ T2889] usb 4-1: config 0 descriptor?? [ 1157.955175][ T2889] ums-datafab 4-1:0.47: USB Mass Storage device detected [ 1158.034981][ T2889] ums-sddr55 4-1:0.47: USB Mass Storage device detected [ 1158.126110][ T2889] usb 4-1: USB disconnect, device number 59 17:40:40 executing program 3: syz_usb_connect(0x0, 0xd8, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x28, 0xf2, 0x45, 0x20, 0x7c4, 0xa109, 0x727f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x1, 0x2c, 0x46, 0x6e, 0x0, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x23, 0xff, 0x0, "c8d92601f933"}]}, @generic={0x9d, 0x0, "1d97235b8a3c71248a02c330bb29e74910cd753ff26e080e51f9c37e0e8c8ce74238033a042210f6886a01d0bf768b54da15020063ab1577ea80bcdece8a226a36f7f7ddeca38b7984acf01747f4583a9c7c212d54530ab52b2b728f6b988c804287cb676676f02742e4175af6bcd777da528dd7896467e7dcbb21409a006d1f8700ba737d83efe21f243424cd69dea2c57eed690c0426fd94b6dd"}], [{{0x9, 0x5, 0x87, 0x22b7158b3ece356f, 0x0, 0x0, 0x20, 0xc1}}]}}]}}]}}, 0x0) 17:40:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "74cdd2285022ecf6", "072c8dc8291ef049c527f2399efeb028", "f6c51441", '\x00\x00\x00\x00\x00\x00\a\x00'}, 0x28) 17:40:40 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x201526d0) 17:40:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) 17:40:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) 17:40:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xcc, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r3, 0x402c542c, &(0x7f00000000c0)) [ 1158.793456][ T3420] kvm: pic: non byte read [ 1158.807284][ T3420] kvm: pic: non byte write 17:40:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "74cdd2285022ecf6", "072c8dc8291ef049c527f2399efeb028", "f6c51441", '\x00\x00\x00\x00\x00\x00\a\x00'}, 0x28) 17:40:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) 17:40:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) [ 1159.018681][ T3420] picdev_read: 58 callbacks suppressed [ 1159.018695][ T3420] kvm: pic: non byte read [ 1159.029305][ T17] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1159.071039][ T3420] kvm: pic: non byte read 17:40:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000015c0)={0x6, 0x1f}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135, 0x8}], 0x1) [ 1159.100252][ T3420] picdev_write: 59 callbacks suppressed [ 1159.100265][ T3420] kvm: pic: non byte write [ 1159.112434][ T3420] kvm: pic: non byte read [ 1159.128062][ T3420] kvm: pic: non byte write 17:40:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "74cdd2285022ecf6", "072c8dc8291ef049c527f2399efeb028", "f6c51441", '\x00\x00\x00\x00\x00\x00\a\x00'}, 0x28) [ 1159.164169][ T3420] kvm: pic: non byte read [ 1159.174277][ T3420] kvm: pic: non byte write [ 1159.291812][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 1159.412793][ T17] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1159.421139][ T17] usb 4-1: config 0 has no interface number 0 [ 1159.427687][ T17] usb 4-1: config 0 interface 47 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1159.438951][ T17] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=72.7f [ 1159.448539][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.528096][ T17] usb 4-1: config 0 descriptor?? [ 1159.575311][ T17] ums-datafab 4-1:0.47: USB Mass Storage device detected [ 1159.624486][ T17] ums-sddr55 4-1:0.47: USB Mass Storage device detected [ 1159.780494][ T17] usb 4-1: USB disconnect, device number 60 17:40:42 executing program 3: syz_usb_connect(0x0, 0xd8, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x28, 0xf2, 0x45, 0x20, 0x7c4, 0xa109, 0x727f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x1, 0x2c, 0x46, 0x6e, 0x0, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x23, 0xff, 0x0, "c8d92601f933"}]}, @generic={0x9d, 0x0, "1d97235b8a3c71248a02c330bb29e74910cd753ff26e080e51f9c37e0e8c8ce74238033a042210f6886a01d0bf768b54da15020063ab1577ea80bcdece8a226a36f7f7ddeca38b7984acf01747f4583a9c7c212d54530ab52b2b728f6b988c804287cb676676f02742e4175af6bcd777da528dd7896467e7dcbb21409a006d1f8700ba737d83efe21f243424cd69dea2c57eed690c0426fd94b6dd"}], [{{0x9, 0x5, 0x87, 0x22b7158b3ece356f, 0x0, 0x0, 0x20, 0xc1}}]}}]}}]}}, 0x0) 17:40:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) 17:40:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) prctl$PR_MCE_KILL(0x21, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="11a58fde7649496403db92ed306004b3d3cbfc195485c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba5c6a3bf9b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef37f627e3c7168ecda2cf224a491bea6129fcd954b88dbb2d29464931bcd5378041db67ddc70ee856ae09c1b26b9ada008a7d52bf1a160606865a29794f36b2a3811c66e9fe27af8fc8356374e37f3eca244367fb535dde71fae4683710761b89f18820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486ec31c40c7f0007a69c24da10db6f60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f08d7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999464e3e37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389ceb934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f7806d7d76cdf489f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e102b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b2f0c35be34cb6e6f75087ff963c188d43bcb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac1099244e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63d0bff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652", 0x6c1, 0x0, 0x0, 0x0) socket(0x8000000000000010, 0x802, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x7, 0x0, 0x0, 0x8000}, 0x0) 17:40:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0x1f, 0x7f}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10000000004cb]}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "74cdd2285022ecf6", "072c8dc8291ef049c527f2399efeb028", "f6c51441", '\x00\x00\x00\x00\x00\x00\a\x00'}, 0x28) 17:40:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000001380)=""/4110) 17:40:42 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0267d924ca5ccb"], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) 17:40:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000700)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000001900"], 0x90ad) 17:40:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7c, 0x0, [0x40000002]}) [ 1160.662276][ T17] usb 4-1: new high-speed USB device number 61 using dummy_hcd 17:40:42 executing program 1: r0 = socket(0x1e, 0x80005, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x13b, 0x0}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="419a4334729284da9484ed1cc34a8b2149391545c4737b7f01040000"], 0x1c) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x0, 0xfffffffffffffdb7}, 0x0) 17:40:42 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)=0x32) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) [ 1160.778475][ T3488] device nr0 entered promiscuous mode [ 1160.902600][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 1160.943142][ T1780] Subscription rejected, illegal request [ 1161.028285][ T17] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1161.037042][ T17] usb 4-1: config 0 has no interface number 0 [ 1161.043357][ T17] usb 4-1: config 0 interface 47 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1161.054526][ T17] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=72.7f [ 1161.063755][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.159367][ T17] usb 4-1: config 0 descriptor?? [ 1161.184295][ T3488] device nr0 entered promiscuous mode [ 1161.206135][ T17] ums-datafab 4-1:0.47: USB Mass Storage device detected [ 1161.264628][ T17] ums-sddr55 4-1:0.47: USB Mass Storage device detected [ 1161.424792][ T17] usb 4-1: USB disconnect, device number 61 17:40:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005c00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x3fffffe) 17:40:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 17:40:44 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2f, 0x44, 0xcb, 0x8, 0x46d, 0x8b5, 0x39d7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x38, 0x0, 0x65}}]}}]}}, 0x0) 17:40:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x33, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 17:40:44 executing program 4: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f00000004c0)="0795040000000029a77ce74fb56bdf7650ccb088ed030942dc470053f48edcd233a91f5d0000356317b447d168e4e8baf82844eb923d801ce1a52fb39ecd38b972a4373a57559399", 0x48) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x0, 0x989680}) 17:40:44 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x0, 0x0, "e6b68c861975c7a61118a7bee192e6e8b7c82052664b7b43e08f60ada7f21b10d52c59185bea93367629af0961e083cb1dead8efb30aa8569a33e88a06e9748a5dfa38757a2d0e11b7eafa492ef7ca4d"}, 0xd8) 17:40:44 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x4000000000000006}) 17:40:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') dup3(r0, r1, 0x0) 17:40:44 executing program 4: personality(0x0) 17:40:44 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='cpuacH\x8a|\x1a<\x0f\xfb9\xdb\x11|\x1a-\xad.usage_sys\x00\xc7\xec\xa9\xf1\x17\xd6\xd4\xd4\xcf\x8b\x88\xcd\v\xda\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf1g\x9cq\xf3Y\x90\xc5\f&\xf2\f\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd3\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};', 0x26e1, 0x0) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001100)={r0, 0x0}, 0x20) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040)=0x81, 0x4) io_setup(0x8, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_pwait(r1, 0x0, 0x0, 0x52d, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x52d, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x52d, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000380)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000380)={0x1}) 17:40:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8000001ff) [ 1162.262322][ T17] usb 6-1: new high-speed USB device number 77 using dummy_hcd 17:40:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000034c0)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100), 0x4) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x800000002, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 17:40:44 executing program 2: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x37) 17:40:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x0, 0x0, 0xc0000084], [0x3a]}) [ 1162.425351][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1162.503641][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1162.624180][ T17] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=39.d7 [ 1162.633549][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.659399][ T17] usb 6-1: config 0 descriptor?? [ 1162.708937][ T17] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1162.912469][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 1162.932413][ T17] pwc: Failed to set LED on/off time (-71) [ 1162.952443][ T17] pwc: send_video_command error -71 [ 1162.957747][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1162.968400][ T17] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 1162.978544][ T17] usb 6-1: USB disconnect, device number 77 [ 1163.679010][ T2889] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1163.932237][ T2889] usb 6-1: Using ep0 maxpacket: 8 [ 1164.052486][ T2889] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=39.d7 [ 1164.061644][ T2889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.071555][ T2889] usb 6-1: config 0 descriptor?? [ 1164.127469][ T2889] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1164.333095][ T2889] pwc: recv_control_msg error -71 req 06 val 3700 [ 1164.352316][ T2889] pwc: Failed to set LED on/off time (-71) [ 1164.382327][ T2889] pwc: send_video_command error -71 [ 1164.387678][ T2889] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1164.395568][ T2889] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 1164.405955][ T2889] usb 6-1: USB disconnect, device number 78 17:40:46 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) setgid(0x0) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz', 0x1, 0x74}, &(0x7f0000000040)='uservboxnet1\x00', 0x0) 17:40:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000300ffffffff00000000080001007069650004000200120fd1d1e487cc5c604daef67e7be9e8e3c8750fae1c61f3ede26c88174da61336482772ae843dd14e5e41823937590271ba84c407d84fcebe5e487744616a0a3269c5935dfd700e9cb70fc8530a86faa882fc2a56ceec315a2912"], 0x30}}, 0x0) r2 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:40:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000034c0)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100), 0x4) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x800000002, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 17:40:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x48, 0x1a0]}) 17:40:46 executing program 0: creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='cgroup\x00', 0x0, &(0x7f0000000840)='none\x00') 17:40:46 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x100d}}) 17:40:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2}}, 0x10) [ 1164.897647][ T3584] cgroup1: Need name or subsystem set [ 1164.919752][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:40:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001100090469001b00810800000700fd3f07000000450001070000001419001a0004000000090000009183a8a5000200000000000000", 0x39}], 0x1) 17:40:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) 17:40:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000034c0)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100), 0x4) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x800000002, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 17:40:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000c659ca807737f400000000000100960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x1) 17:40:47 executing program 5: r0 = socket(0x22, 0x2, 0x1) sendto$inet6(r0, &(0x7f0000001180)="c839075873894ab2", 0x8, 0x0, 0x0, 0x0) [ 1165.215103][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1165.228039][ C0] sd 0:0:1:0: [sg0] tag#2681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1165.237765][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB: Change Definition [ 1165.244788][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[00]: 40 00 00 20 00 00 00 00 58 00 00 00 00 00 00 00 [ 1165.254590][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1165.264420][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1165.274254][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1165.284070][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[40]: 53 00 00 00 c6 59 ca 80 77 37 f4 00 00 00 00 00 [ 1165.293903][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[50]: 01 00 96 00 00 00 00 00 00 00 00 20 00 00 00 00 [ 1165.303766][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[60]: 00 00 00 00 bf bb b1 80 16 41 0f 67 f8 ed 2f bd 17:40:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x20000398) [ 1165.313555][ C0] sd 0:0:1:0: [sg0] tag#2681 CDB[70]: a6 59 95 91 07 67 56 17:40:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@migrate={0xe4, 0x21, 0x281, 0x0, 0x0, {{@in=@multicast2, @in=@local}}, [@migrate={0x5c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2}]}, @policy_type={0xc}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@ipv4={[], [], @empty}}}]}, 0xe4}}, 0x0) 17:40:47 executing program 3: r0 = socket$inet6(0xa, 0x8000008000080003, 0x800000000000003) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001300290a0000000000000000078f7c00", @ANYRES32=r2, @ANYBLOB="000000000000000008000c800400220000c89865f30b4c8fb5cdaab6e273a89e7052cf84ce8998723c775a8648d39bb75995112e525a4e61a3b6d8dec1f0fa2e723e87d001960875613a95f022a70a3d1eeaa68955433dd1d7c161dc129cf03030fc5cfce51b558cb033978933b47794e0f6f7fe15ff1300000000adfb7ffd8e1b755c5c07c6707167c0cd34d1e553b81c"], 0x28}}, 0x0) 17:40:47 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c3f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000401000/0x3000)=nil, 0x2) 17:40:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000034c0)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100), 0x4) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x800000002, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 17:40:47 executing program 5: r0 = syz_usb_connect(0x0, 0x52, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x9, 0x89, 0xe7, 0x20, 0x1b3d, 0x153, 0x19cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6c, 0x0, 0x2, 0xc, 0x1b, 0xfd, 0x0, [@uac_control={{}, [@mixer_unit={0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe, 0x0, "a29a50592338180d0443cb8b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6d, 0xf4, 0xbd, 0x0, 0x681, 0x5, 0x1ffd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa, 0xac, 0xb9}}]}}]}}, 0x0) 17:40:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@migrate={0xe4, 0x21, 0x281, 0x0, 0x0, {{@in=@multicast2, @in=@local}}, [@migrate={0x5c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2}]}, @policy_type={0xc}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@ipv4={[], [], @empty}}}]}, 0xe4}}, 0x0) 17:40:47 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="fc446145f2b0d76fdd93cce75b8eb034", 0x7}, 0x99, 0x0}}], 0x1, 0x0) [ 1165.682526][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:40:47 executing program 3: ioprio_set$uid(0x3, 0x0, 0x0) 17:40:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = socket$inet(0x2, 0x8000000003, 0x82) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @remote}, 0x4) 17:40:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x0, [], @ptr}}) 17:40:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 1165.872825][ T2889] usb 6-1: new high-speed USB device number 79 using dummy_hcd 17:40:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@migrate={0xe4, 0x21, 0x281, 0x0, 0x0, {{@in=@multicast2, @in=@local}}, [@migrate={0x5c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2}]}, @policy_type={0xc}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@ipv4={[], [], @empty}}}]}, 0xe4}}, 0x0) 17:40:48 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0xffffffffffffffff}) 17:40:48 executing program 3: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)=0xff55) 17:40:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={0xfffffffffffffffd}, 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r1, &(0x7f0000000740)=""/384, 0x180) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r2, 0xa, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 1166.114005][ T2889] usb 6-1: Using ep0 maxpacket: 32 17:40:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@migrate={0xe4, 0x21, 0x281, 0x0, 0x0, {{@in=@multicast2, @in=@local}}, [@migrate={0x5c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2}]}, @policy_type={0xc}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@ipv4={[], [], @empty}}}]}, 0xe4}}, 0x0) [ 1166.312457][ T2889] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 1166.320831][ T2889] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1166.330153][ T2889] usb 6-1: config 0 has no interface number 1 [ 1166.336467][ T2889] usb 6-1: config 0 interface 108 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1166.349784][ T2889] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1166.642792][ T2889] usb 6-1: string descriptor 0 read error: -22 [ 1166.649490][ T2889] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0153, bcdDevice=19.cf [ 1166.659034][ T2889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.668512][ T2889] usb 6-1: config 0 descriptor?? [ 1166.714626][ T2889] hub 6-1:0.108: ignoring external hub [ 1166.722194][ T2889] ftdi_sio 6-1:0.108: FTDI USB Serial Device converter detected [ 1166.731169][ T2889] usb 6-1: Detected FT2232C [ 1166.932342][ T2889] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1166.953649][ T2889] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1166.961828][ T2889] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1166.972765][ T2889] hub 6-1:0.0: ignoring external hub [ 1166.980155][ T2889] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1166.989048][ T2889] usb 6-1: Detected FT2232C [ 1167.022996][ T2889] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 1167.042585][ T2889] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 1167.050766][ T2889] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1167.093565][ T2889] usb 6-1: USB disconnect, device number 79 [ 1167.104902][ T2889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1167.115805][ T2889] ftdi_sio 6-1:0.108: device disconnected [ 1167.129235][ T2889] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1167.139890][ T2889] ftdi_sio 6-1:0.0: device disconnected [ 1167.502227][ T2889] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1167.742298][ T2889] usb 6-1: Using ep0 maxpacket: 32 [ 1167.862517][ T2889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1167.922513][ T2889] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1167.930174][ T2889] usb 6-1: can't read configurations, error -71 [ 1168.622245][ T2889] usb 6-1: new high-speed USB device number 81 using dummy_hcd 17:40:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x7ff8, 0xe, 0x0, 0xfffffffffffffe2b) 17:40:50 executing program 0: add_key$user(0x0, 0x0, &(0x7f00000002c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7", 0x15, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x16) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 17:40:50 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c9613ff8c2531d48e56c969a3547034571923a2c0e75ecb75217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731bd6a16792b1319e2acc0eb1ba8116a4ae39f9465a4cf19d78a65"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321212c0f0df81f47442a"], 0x10094) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9d"], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1a000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:40:50 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xf, {0xfffffffffffffdaa, 0x29, 0x0, 0x0, 0x0, 0x0, "008000", "022000"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000300)={0x0, 0x0, 0x82, {0x82, 0x0, "b24aa67be06392dec5ec2f69d14c0a0dc2760482eef164105b1bf2b7c520b255b46b463f23edcaea567e9a16183e7094d5ef0a11614603f866fea4c5b27c20d604248b2e7af1bcc34c6ad8aa3681ae7e1108283b1db6b33555b8334846248ea81b7da87e439d6de347f215b0c99fd9756e4c0de3270d5ecd9d94ad5c785dc01a"}}, 0x0}, 0x0) 17:40:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{}, 0x1, 0x52, 0x400000002}], 0xffd9) 17:40:50 executing program 4: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:51 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x241) [ 1169.000632][ T3695] vivid-001: ================= START STATUS ================= [ 1169.009229][ T3695] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1169.017124][ T3695] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1169.024264][ T3695] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1169.031771][ T3695] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1169.040527][ T3695] v4l2-ctrls: vivid-001: OSD Text Mode: All [ 1169.047010][ T3695] v4l2-ctrls: vivid-001: Show Border: false [ 1169.053302][ T3695] v4l2-ctrls: vivid-001: Show Square: false [ 1169.059380][ T3695] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1169.067616][ T3695] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1169.075438][ T3695] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false [ 1169.083056][ T3695] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1169.090721][ T3695] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1169.097626][ T3695] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1169.106292][ T3695] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1169.114043][ T3695] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1169.121240][ T3695] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1169.128618][ T3695] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1169.134788][ T3695] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1169.141640][ T3695] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default [ 1169.148650][ T3695] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1169.155338][ T3695] v4l2-ctrls: vivid-001: Quantization: Default [ 1169.162368][ T3695] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1169.169563][ T3695] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 [ 1169.176967][ T3695] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1169.187532][ T3695] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1169.195397][ T3695] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1169.220461][ T3695] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1169.227093][ T3695] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1169.234552][ T3695] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1169.243538][ T3695] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1169.250429][ T3695] tpg source WxH: 320x180 (R'G'B) [ 1169.255747][ T3695] tpg field: 1 [ 1169.259464][ T3695] tpg crop: 320x180@0x0 [ 1169.264573][ T3695] tpg compose: 320x180@0x0 [ 1169.269138][ T3695] tpg colorspace: 8 [ 1169.273115][ T3695] tpg transfer function: 0/0 [ 1169.277824][ T3695] tpg quantization: 0/0 [ 1169.282698][ T3695] tpg RGB range: 0/2 [ 1169.286718][ T3695] vivid-001: ================== END STATUS ================== 17:40:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 1169.312698][ T2889] usb 6-1: device not accepting address 81, error -71 [ 1169.338217][ T2889] usb usb6-port1: attempt power cycle 17:40:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x6}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0xfffffffffffffffe}, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1169.423748][ T3716] input: syz1 as /devices/virtual/input/input159 [ 1169.445077][ T17] usb 3-1: new high-speed USB device number 68 using dummy_hcd 17:40:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x84, 0x14, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0xfffffffffffff801, 0x20, 0x6}}, @IFA_FLAGS={0x8, 0x8, 0x141}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 1169.506405][ T3720] input: syz1 as /devices/virtual/input/input160 [ 1169.692618][ T17] usb 3-1: Using ep0 maxpacket: 16 17:40:51 executing program 4: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:51 executing program 1: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871be3101f20f488771cd2dd2112444a4bfa454676be"], 0x0, 0x20}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1169.814098][ T17] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1169.823389][ T17] usb 3-1: config 0 has no interface number 0 [ 1169.829711][ T17] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1169.839101][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.921521][ T17] usb 3-1: config 0 descriptor?? 17:40:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x2, @dev}]}}}]}, 0x38}}, 0x0) [ 1169.995788][ T3740] misc userio: No port type given on /dev/userio [ 1170.023426][ T3732] vivid-001: ================= START STATUS ================= [ 1170.033113][ T3732] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1170.040166][ T3732] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1170.047757][ T3732] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1170.056974][ T3732] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1170.064341][ T3732] v4l2-ctrls: vivid-001: OSD Text Mode: All [ 1170.070656][ T3732] v4l2-ctrls: vivid-001: Show Border: false [ 1170.076960][ T3732] v4l2-ctrls: vivid-001: Show Square: false [ 1170.083765][ T3732] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1170.091392][ T3732] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1170.100367][ T3732] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false [ 1170.109231][ T3732] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1170.117490][ T3732] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1170.124385][ T3732] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1170.131654][ T3732] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1170.141722][ T3732] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1170.149160][ T3732] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1170.156668][ T3732] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1170.162945][ T3732] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1170.169804][ T3732] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default [ 1170.177192][ T3732] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1170.184578][ T3732] v4l2-ctrls: vivid-001: Quantization: Default [ 1170.191298][ T3732] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1170.198607][ T3732] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 [ 1170.205719][ T3732] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1170.215742][ T3732] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1170.223226][ T3732] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1170.232348][ T3732] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1170.238987][ T3732] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1170.246956][ T3732] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1170.254830][ T3732] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1170.261528][ T3732] tpg source WxH: 320x180 (R'G'B) [ 1170.266850][ T3732] tpg field: 1 [ 1170.270898][ T3732] tpg crop: 320x180@0x0 [ 1170.276324][ T3732] tpg compose: 320x180@0x0 [ 1170.281812][ T3732] tpg colorspace: 8 [ 1170.285967][ T3732] tpg transfer function: 0/0 [ 1170.290702][ T3732] tpg quantization: 0/0 [ 1170.295257][ T3732] tpg RGB range: 0/2 [ 1170.299448][ T3732] vivid-001: ================== END STATUS ================== [ 1170.315034][ T3742] vivid-001: ================= START STATUS ================= [ 1170.323202][ T3742] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1170.329884][ T3742] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1170.336993][ T3742] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1170.344355][ T3742] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1170.351573][ T3742] v4l2-ctrls: vivid-001: OSD Text Mode: All [ 1170.358071][ T3742] v4l2-ctrls: vivid-001: Show Border: false [ 1170.364241][ T3742] v4l2-ctrls: vivid-001: Show Square: false [ 1170.370205][ T3742] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1170.378351][ T3742] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1170.387092][ T3742] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false [ 1170.394364][ T3742] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1170.401573][ T3742] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1170.409993][ T3742] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1170.417309][ T3742] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1170.424533][ T3742] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1170.432183][ T3742] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1170.439233][ T3742] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1170.445226][ T3742] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1170.452349][ T3742] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default [ 1170.465035][ T3742] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1170.471536][ T3742] v4l2-ctrls: vivid-001: Quantization: Default [ 1170.477996][ T3742] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1170.486651][ T3742] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 17:40:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 1170.493655][ T3742] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1170.502584][ T3742] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1170.509826][ T3742] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1170.520589][ T3742] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1170.527015][ T3742] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1170.534392][ T3742] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1170.543442][ T3742] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1170.550121][ T3742] tpg source WxH: 320x180 (R'G'B) [ 1170.555340][ T3742] tpg field: 1 [ 1170.558846][ T3742] tpg crop: 320x180@0x0 [ 1170.564577][ T3742] tpg compose: 320x180@0x0 [ 1170.569391][ T3742] tpg colorspace: 8 [ 1170.573500][ T3742] tpg transfer function: 0/0 [ 1170.578571][ T3742] tpg quantization: 0/0 [ 1170.582997][ T3742] tpg RGB range: 0/2 [ 1170.587087][ T3742] vivid-001: ================== END STATUS ================== [ 1170.832559][ T17] gtco 3-1:0.219: Collection level already at zero [ 1170.841426][ T17] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input162 [ 1171.034643][ T17] usb 3-1: USB disconnect, device number 68 [ 1171.074470][ T17] gtco 3-1:0.219: gtco driver disconnected [ 1171.802229][ T2889] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1172.042164][ T2889] usb 3-1: Using ep0 maxpacket: 16 [ 1172.162320][ T2889] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1172.170908][ T2889] usb 3-1: config 0 has no interface number 0 [ 1172.177390][ T2889] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1172.186545][ T2889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.196326][ T2889] usb 3-1: config 0 descriptor?? 17:40:54 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 17:40:54 executing program 3: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 17:40:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5}) 17:40:54 executing program 4: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:54 executing program 1: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r1) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) pipe(&(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000040), 0x3a8, 0x0) [ 1172.562880][ T2889] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 1172.571195][ T2889] gtco: probe of 3-1:0.219 failed with error -5 [ 1172.627307][ T2889] usb 3-1: USB disconnect, device number 69 17:40:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) dup2(r0, r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 1172.839689][ T3768] vivid-001: ================= START STATUS ================= [ 1172.847902][ T3768] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1172.855101][ T3768] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1172.862290][ T3768] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1172.869913][ T3768] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1172.878003][ T3768] v4l2-ctrls: vivid-001: OSD Text Mode: All 17:40:55 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) write$P9_RSTATu(r2, &(0x7f00000006c0)={0x8b, 0x7d, 0x0, {{0x0, 0x5d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, '/dev/snd/seq\x00', 0x0, '', 0x4, 'eth1', 0x19, '\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x19, '\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}}, 0x8b) [ 1172.885176][ T3768] v4l2-ctrls: vivid-001: Show Border: false [ 1172.891605][ T3768] v4l2-ctrls: vivid-001: Show Square: false [ 1172.897788][ T3768] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1172.905393][ T3768] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1172.913257][ T3768] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false [ 1172.920685][ T3768] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1172.930836][ T3768] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1172.937742][ T3768] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1172.945082][ T3768] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1172.952401][ T3768] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1172.959434][ T3768] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1172.967050][ T3768] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1172.974052][ T3768] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1172.980905][ T3768] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default 17:40:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="31000000130009006900000000000010ab008048130000004600010700000014080003c0252f", 0x26}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x31, 0x11d, 0x0, 0x0, {0x3}, [@nested={0x14, 0x0, [@typed={0x10, 0x1, @binary="9262e42416716e4147"}]}]}, 0x28}}, 0x0) [ 1172.988272][ T3768] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1172.994898][ T3768] v4l2-ctrls: vivid-001: Quantization: Default [ 1173.001714][ T3768] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1173.009541][ T3768] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 [ 1173.016875][ T3768] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1173.026510][ T3768] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1173.033994][ T3768] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1173.042868][ T3768] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1173.049527][ T3768] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1173.057386][ T3768] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1173.065502][ T3768] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1173.072694][ T3768] tpg source WxH: 320x180 (R'G'B) [ 1173.078274][ T3768] tpg field: 1 [ 1173.081827][ T3768] tpg crop: 320x180@0x0 [ 1173.086417][ T3768] tpg compose: 320x180@0x0 [ 1173.091308][ T3768] tpg colorspace: 8 [ 1173.095510][ T3768] tpg transfer function: 0/0 [ 1173.100402][ T3768] tpg quantization: 0/0 [ 1173.104757][ T3768] tpg RGB range: 0/2 [ 1173.108996][ T3768] vivid-001: ================== END STATUS ================== [ 1173.119338][ T3786] vivid-001: ================= START STATUS ================= [ 1173.127326][ T3786] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1173.134080][ T3786] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1173.141048][ T3786] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1173.148339][ T3786] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1173.155424][ T3786] v4l2-ctrls: vivid-001: OSD Text Mode: All [ 1173.161398][ T3786] v4l2-ctrls: vivid-001: Show Border: false [ 1173.167508][ T3786] v4l2-ctrls: vivid-001: Show Square: false [ 1173.173537][ T3786] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1173.180884][ T3786] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1173.188251][ T3786] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false [ 1173.195439][ T3786] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1173.202718][ T3786] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1173.209256][ T3786] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1173.216244][ T3786] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1173.223432][ T3786] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1173.230365][ T3786] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1173.237489][ T3786] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1173.243455][ T3786] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1173.250164][ T3786] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default [ 1173.256718][ T3786] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1173.263213][ T3786] v4l2-ctrls: vivid-001: Quantization: Default [ 1173.269436][ T3786] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1173.276490][ T3786] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 17:40:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:40:55 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000040)) 17:40:55 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @loopback}}, 0x1e) [ 1173.285891][ T3786] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1173.295186][ T3786] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1173.302382][ T3786] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1173.310824][ T3786] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1173.317548][ T3786] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1173.324884][ T3786] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1173.332454][ T3786] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1173.339085][ T3786] tpg source WxH: 320x180 (R'G'B) [ 1173.344302][ T3786] tpg field: 1 [ 1173.347718][ T3786] tpg crop: 320x180@0x0 [ 1173.351980][ T3786] tpg compose: 320x180@0x0 [ 1173.356970][ T3786] tpg colorspace: 8 [ 1173.360858][ T3786] tpg transfer function: 0/0 [ 1173.365550][ T3786] tpg quantization: 0/0 [ 1173.369780][ T3786] tpg RGB range: 0/2 [ 1173.373801][ T3786] vivid-001: ================== END STATUS ================== 17:40:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0x7, @sdr}) 17:40:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r2, &(0x7f0000000100), 0x2d) semctl$IPC_RMID(r2, 0x0, 0x0) 17:40:55 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @random="188d3ea1dabc", [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x6, 0x0, @loopback, @dev, [], "800000e77f000400"}}}}}}}, 0x0) 17:40:56 executing program 4: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:56 executing program 1: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(0xffffffffffffffff, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000001c0)={0x0, r4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x2, {0x4, 0x3, 0x2, 0xc0e5}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x4f424752}}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 17:40:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:40:56 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/192, 0xc0}, 0x0) 17:40:56 executing program 2: syz_open_dev$vbi(&(0x7f0000001700)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:40:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, "df348e9bbbee1bcfb24a154bcbc0a9d195b04effce5922a69e3da15491723b33bc924c978cbd9fbddbc636349b66d56eee36fb33a4287d9002e6816d42c91fe7", "2d3c1a4387a1c42a2211ee08d0de68350e1884b9621c1b6333393d3bacb2d6ab7c6aa3b9ddfcb4066c3a97a28744757d4126a8718d2dae2493325b65a505a0dc", "c368f2b810a0c6c6428da963e15d52600793fa0ba6672af629fb9c8a12a95af0"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:40:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 17:40:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1174.434534][ T3845] input: syz1 as /devices/virtual/input/input164 [ 1174.453978][ T3824] vivid-001: ================= START STATUS ================= [ 1174.461914][ T3824] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1174.470410][ T3824] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1174.478011][ T3824] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1174.485518][ T3824] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1174.492726][ T3824] v4l2-ctrls: vivid-001: OSD Text Mode: All [ 1174.498968][ T3824] v4l2-ctrls: vivid-001: Show Border: false [ 1174.505405][ T3824] v4l2-ctrls: vivid-001: Show Square: false [ 1174.511452][ T3824] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1174.519309][ T3824] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1174.526957][ T3824] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false 17:40:56 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings}) [ 1174.534425][ T3824] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1174.541682][ T3824] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1174.548445][ T3824] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1174.555534][ T3824] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1174.562627][ T3824] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1174.569423][ T3824] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1174.576953][ T3824] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1174.583468][ T3824] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1174.590627][ T3824] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default [ 1174.597565][ T3824] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1174.604109][ T3824] v4l2-ctrls: vivid-001: Quantization: Default [ 1174.610447][ T3824] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1174.617724][ T3824] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 [ 1174.624616][ T3824] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1174.633784][ T3824] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1174.641036][ T3824] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1174.649873][ T3824] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1174.656307][ T3824] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1174.663961][ T3824] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1174.672126][ T3824] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1174.679360][ T3824] tpg source WxH: 320x180 (R'G'B) 17:40:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6ff17b91c3b0d873722b41a1100008f2cd6cc62e13f10a5f31a26f4233e3ba1ff40e062a43f80b1baf272a416e63e58afdf284732bd1e1970000000009f313c4957c67a08676517ba1300000000858003ffffffffffffffff3e26b5ca26a6b84dbd533925db8b54b33da7b9c7ae0000000061e2448f23a7e40000000000d5a0a5c33d3cc0b2c5944b61846c99a5f7de00c26cb542f13b5bc18adcfb59dfb5edff90d0a500a0fafa7af4fea59c878c765f6a084b83a0c37596366d369187f44461ec0cb24a1a7319bb3bfde997d95eef41e75d1dcd835971f29d99d5f0a326007714"], 0x18}}], 0x1, 0x4048000) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1174.684642][ T3824] tpg field: 1 [ 1174.688269][ T3824] tpg crop: 320x180@0x0 [ 1174.693324][ T3824] tpg compose: 320x180@0x0 [ 1174.698451][ T3824] tpg colorspace: 8 [ 1174.702452][ T3824] tpg transfer function: 0/0 [ 1174.707234][ T3824] tpg quantization: 0/0 [ 1174.711613][ T3824] tpg RGB range: 0/2 [ 1174.715895][ T3824] vivid-001: ================== END STATUS ================== [ 1174.738498][ T3854] input: syz1 as /devices/virtual/input/input165 17:40:56 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc0d05605, &(0x7f0000000000)={0x2, {0x0, 0x0, 0x0, 0x34325842}}) 17:40:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) removexattr(0x0, &(0x7f0000000080)=@random={'security.', 'vfat\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) recvmmsg(r2, &(0x7f0000000080), 0x4000000000001ac, 0x2040, 0x0) [ 1175.128865][ T3837] vivid-001: ================= START STATUS ================= [ 1175.136883][ T3837] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar [ 1175.143859][ T3837] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100 [ 1175.151264][ T3837] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement [ 1175.160163][ T3837] v4l2-ctrls: vivid-001: Vertical Movement: No Movement [ 1175.167658][ T3837] v4l2-ctrls: vivid-001: OSD Text Mode: All [ 1175.173703][ T3837] v4l2-ctrls: vivid-001: Show Border: false [ 1175.179885][ T3837] v4l2-ctrls: vivid-001: Show Square: false [ 1175.186062][ T3837] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false [ 1175.193647][ T3837] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false [ 1175.201115][ T3837] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false [ 1175.208600][ T3837] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false [ 1175.215912][ T3837] v4l2-ctrls: vivid-001: Reduced Framerate: false [ 1175.222693][ T3837] v4l2-ctrls: vivid-001: Enable Capture Cropping: true [ 1175.229826][ T3837] v4l2-ctrls: vivid-001: Enable Capture Composing: true [ 1175.237241][ T3837] v4l2-ctrls: vivid-001: Enable Capture Scaler: true [ 1175.244101][ T3837] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame [ 1175.251383][ T3837] v4l2-ctrls: vivid-001: Colorspace: sRGB [ 1175.257439][ T3837] v4l2-ctrls: vivid-001: Transfer Function: Default [ 1175.264323][ T3837] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default [ 1175.271231][ T3837] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179 [ 1175.278068][ T3837] v4l2-ctrls: vivid-001: Quantization: Default [ 1175.284543][ T3837] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false [ 1175.291672][ T3837] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3 [ 1175.298802][ T3837] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1175.308162][ T3837] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive [ 1175.315797][ T3837] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1175.324314][ T3837] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2 [ 1175.331055][ T3837] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false [ 1175.338768][ T3837] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic [ 1175.346971][ T3837] v4l2-ctrls: vivid-001: Power Present: 0x00000001 [ 1175.354209][ T3837] tpg source WxH: 320x180 (R'G'B) [ 1175.359616][ T3837] tpg field: 1 [ 1175.363195][ T3837] tpg crop: 320x180@0x0 [ 1175.367740][ T3837] tpg compose: 320x180@0x0 [ 1175.372377][ T3837] tpg colorspace: 8 [ 1175.376441][ T3837] tpg transfer function: 0/0 [ 1175.381479][ T3837] tpg quantization: 0/0 [ 1175.386274][ T3837] tpg RGB range: 0/2 [ 1175.390289][ T3837] vivid-001: ================== END STATUS ================== 17:40:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r1, 0x1) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 17:40:57 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:40:57 executing program 2: pipe2(&(0x7f0000000000), 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 17:40:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r0, 0x0, 0x9a) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x401}) 17:40:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060000000040ffffffffff00000000000000140002000000000004000000f58c887a18e219a3755ae1cc150000000000000000"], 0x40}}, 0x0) 17:40:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r0) 17:40:58 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uptfs us'], 0x1, 0xfffffffffffffffd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 17:40:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x481) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1176.012668][ T3893] encrypted_key: master key parameter 'us' is invalid [ 1176.048735][ T3896] encrypted_key: master key parameter 'us' is invalid 17:40:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$tipc(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 17:40:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x80000101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="80fd02090040", 0x6}], 0x1, 0x0) 17:40:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000340)=""/148, 0x94}], 0x3}}], 0x1, 0x0, 0x0) [ 1176.253850][ T17] usb 1-1: new high-speed USB device number 72 using dummy_hcd 17:40:58 executing program 5: timer_create(0xfffffffffffffffd, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) 17:40:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x1e, 0x800000000004, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) [ 1176.492773][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1176.612646][ T17] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 1176.620954][ T17] usb 1-1: config 0 has no interface number 0 [ 1176.627655][ T17] usb 1-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1176.637686][ T17] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1176.647017][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.657522][ T17] usb 1-1: config 0 descriptor?? [ 1176.922444][ T17] hdpvr 1-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1176.932672][ T17] hdpvr 1-1:0.26: untested firmware, the driver might not work. [ 1177.677725][ T17] ir-kbd-i2c 0-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 1177.702580][ T17] hdpvr 1-1:0.26: Could not setup controls [ 1177.709486][ T17] hdpvr 1-1:0.26: registering videodev failed [ 1177.727090][ T17] hdpvr: probe of 1-1:0.26 failed with error -71 [ 1177.736914][ T17] usb 1-1: USB disconnect, device number 72 [ 1178.202420][ T17] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1178.442343][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1178.562403][ T17] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 1178.570696][ T17] usb 1-1: config 0 has no interface number 0 [ 1178.577027][ T17] usb 1-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1178.587021][ T17] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1178.596221][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.605931][ T17] usb 1-1: config 0 descriptor?? [ 1178.852417][ T17] hdpvr 1-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1178.862707][ T17] hdpvr 1-1:0.26: untested firmware, the driver might not work. 17:41:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000340)=""/148, 0x94}], 0x3}}], 0x1, 0x0, 0x0) 17:41:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="66b8b9000f00d0c7442400b7fe0000c744240250260000c7442406000000000f011c240f78ba0000c0fe660f3834860a000000c4c275ac7c2c003e3e0f79970c00000066baf80cb8caae098cefb8000000000f23d00f21f835300000040f23f8ecc6f84c0f32f30fc736", 0x47}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000100000000000800030040000000", 0x24) 17:41:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 17:41:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r0, 0x0, 0x9a) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x401}) 17:41:01 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1179.011508][ T17] hdpvr 1-1:0.26: device init failed [ 1179.017364][ T17] hdpvr: probe of 1-1:0.26 failed with error -12 [ 1179.048945][ T17] usb 1-1: USB disconnect, device number 73 17:41:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000340)=""/148, 0x94}], 0x3}}], 0x1, 0x0, 0x0) 17:41:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) 17:41:01 executing program 5: syz_emit_ethernet(0x67, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x31, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff87, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [], 'F'}}}}}}}, 0x0) 17:41:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000340)=""/148, 0x94}], 0x3}}], 0x1, 0x0, 0x0) 17:41:01 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @link_local, [{}], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @remote, "9285d939dcb5f880d8cc3a4eeffc2866"}}}}, 0x0) 17:41:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 17:41:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 1179.512791][ T17] usb 1-1: new high-speed USB device number 74 using dummy_hcd 17:41:01 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}}}}}}}, 0x0) 17:41:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000000), &(0x7f0000000080)=0x10) [ 1179.598615][ T3968] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:41:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r0, 0x0, 0x9a) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x401}) [ 1179.752567][ T17] usb 1-1: Using ep0 maxpacket: 8 17:41:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000023c0)=""/4096, 0x18}], 0x3d3) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1179.874885][ T17] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 1179.883419][ T17] usb 1-1: config 0 has no interface number 0 [ 1179.889676][ T17] usb 1-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1179.899931][ T17] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1179.909169][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.970063][ T3988] input: syz1 as /devices/virtual/input/input166 [ 1180.025965][ T17] usb 1-1: config 0 descriptor?? [ 1180.126766][ T3991] input: syz1 as /devices/virtual/input/input167 [ 1180.282376][ T17] hdpvr 1-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1180.292749][ T17] hdpvr 1-1:0.26: untested firmware, the driver might not work. [ 1181.051593][ T17] ir-kbd-i2c 0-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 1181.083357][ T17] hdpvr 1-1:0.26: Could not setup controls [ 1181.089792][ T17] hdpvr 1-1:0.26: registering videodev failed [ 1181.107601][ T17] hdpvr: probe of 1-1:0.26 failed with error -71 [ 1181.116547][ T17] usb 1-1: USB disconnect, device number 74 17:41:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 17:41:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000000843513130000000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002900000029000c53a260298b58b174ba9839a1bd0f72a48fc93cedee42366a179660567a17e17f7cbb49c425"], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:41:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000500)={0x0, 0x0, @ioapic}) 17:41:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 17:41:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r0, 0x0, 0x9a) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x401}) 17:41:03 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:41:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 17:41:03 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000077000/0x2000)=nil, 0x2000, 0x9) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 17:41:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 1181.554182][ T2889] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1181.676326][ T17] usb 1-1: new high-speed USB device number 75 using dummy_hcd 17:41:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 1181.793913][ T2889] usb 6-1: Using ep0 maxpacket: 8 17:41:03 executing program 3: r0 = socket$inet6(0xa, 0x2000000080803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in6=@empty, 0x0, 0x3ff, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 1181.922827][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1181.945422][ T2889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.956628][ T2889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1181.969841][ T2889] usb 6-1: New USB device found, idVendor=5143, idProduct=3031, bcdDevice= 0.00 [ 1181.979050][ T2889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:04 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xa1d7, 0x3136564e, 0x0, @stepwise}) 17:41:04 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c030502180303010000000800010041024fc10768", 0x22) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 1182.012899][ T2889] usb 6-1: config 0 descriptor?? [ 1182.082915][ T17] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 1182.091146][ T17] usb 1-1: config 0 has no interface number 0 [ 1182.097503][ T17] usb 1-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1182.107529][ T17] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1182.116757][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.207080][ T4037] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.225158][ T17] usb 1-1: config 0 descriptor?? [ 1182.478974][ T2889] hid-generic 0003:5143:3031.0046: unknown main item tag 0x5 [ 1182.482551][ T17] hdpvr 1-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1182.486857][ T2889] hid-generic 0003:5143:3031.0046: unknown main item tag 0x4 [ 1182.496536][ T17] hdpvr 1-1:0.26: untested firmware, the driver might not work. [ 1182.504441][ T2889] hid-generic 0003:5143:3031.0046: unbalanced collection at end of report description [ 1182.521687][ T2889] hid-generic: probe of 0003:5143:3031.0046 failed with error -22 [ 1182.678686][ T2889] usb 6-1: USB disconnect, device number 83 [ 1183.004872][ T4046] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1183.311489][ T17] ir-kbd-i2c 0-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 1183.351473][ T17] hdpvr 1-1:0.26: Could not setup controls [ 1183.358816][ T17] hdpvr 1-1:0.26: registering videodev failed [ 1183.378928][ T17] hdpvr: probe of 1-1:0.26 failed with error -71 [ 1183.396967][ T17] usb 1-1: USB disconnect, device number 75 [ 1183.462257][T21719] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1183.722280][T21719] usb 6-1: Using ep0 maxpacket: 8 [ 1183.842667][T21719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.853771][T21719] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1183.866933][T21719] usb 6-1: New USB device found, idVendor=5143, idProduct=3031, bcdDevice= 0.00 [ 1183.876204][T21719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.886015][T21719] usb 6-1: config 0 descriptor?? [ 1184.192450][T21719] hid-generic 0003:5143:3031.0047: unknown main item tag 0x5 [ 1184.201765][T21719] hid-generic 0003:5143:3031.0047: unknown main item tag 0x4 [ 1184.209610][T21719] hid-generic 0003:5143:3031.0047: unbalanced collection at end of report description [ 1184.221620][T21719] hid-generic: probe of 0003:5143:3031.0047 failed with error -22 17:41:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) unshare(0x400) ioctl$UI_DEV_SETUP(r0, 0x4008556c, 0x0) 17:41:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x0) 17:41:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000)="18", 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, 0x0) 17:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffb6}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 17:41:06 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:41:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002500)=[{&(0x7f0000000140)="af", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) [ 1184.270440][ T2889] usb 6-1: USB disconnect, device number 84 17:41:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffdc8, 0x40, 0x0, 0xfffffd87) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000140)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000)="18", 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, 0x0) 17:41:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') lseek(r0, 0xe, 0x0) getdents(r0, &(0x7f0000000780)=""/41, 0x29) 17:41:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340794b80040d8c560a067fffffff81004e220000000058000b4824ca944f647fffffff0028925aa8ee0000000000008000f0fffeffff09000000fff5dd000000100001000008ae4825ff0000040e05a5", 0x58}], 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x38, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x58}}, 0x0) 17:41:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xab}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x62, "cae4dfe210583e3daa1f9a9ceef8ac2b4aadd851abee1c1db6f11aff6a18f9094bc7dd42c129afa1106c6c7691d9f1a1046a9f3a164bd6c24bf3bdd31c6d29c54128ccfc1e22d08e104a0228ee0ef0cf5905df79d286132746ff16669b145b7315b9"}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xab}}, &(0x7f0000000b40)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1184.622279][T21719] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1184.689485][ T4083] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 1184.697831][ T4083] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 17:41:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000)="18", 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, 0x0) 17:41:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xfffffffc}, 0x45c) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 17:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b706000001130a00ad6402000000000045040400010000001704000001130a00b7040000000100006a0af2fe00000000850000001a000000b700000000000000950000000000000063e165cd846a8064d39f33db"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffb}, 0x48) 17:41:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340794b80040d8c560a067fffffff81004e220000000058000b4824ca944f647fffffff0028925aa8ee0000000000008000f0fffeffff09000000fff5dd000000100001000008ae4825ff0000040e05a5", 0x58}], 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x38, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x58}}, 0x0) [ 1184.854581][ T4096] input input169: cannot allocate more than FF_MAX_EFFECTS effects [ 1184.872210][T21719] usb 1-1: Using ep0 maxpacket: 8 17:41:06 executing program 1: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL_GET(0x22) [ 1184.953366][ T17] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1185.012653][T21719] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 1185.020911][T21719] usb 1-1: config 0 has no interface number 0 [ 1185.027256][T21719] usb 1-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1185.037614][T21719] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1185.047322][T21719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.069920][ T4107] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 1185.078219][ T4107] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 1185.134332][T21719] usb 1-1: config 0 descriptor?? [ 1185.212328][ T17] usb 6-1: Using ep0 maxpacket: 16 [ 1185.352303][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.364126][ T17] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1185.377298][ T17] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 1185.387530][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.398130][ T17] usb 6-1: config 0 descriptor?? [ 1185.412654][T21719] hdpvr 1-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1185.423044][T21719] hdpvr 1-1:0.26: untested firmware, the driver might not work. [ 1185.886077][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.893580][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x2 [ 1185.900862][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.908246][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.918185][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.925575][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.932974][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.940170][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.947508][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.955007][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.963047][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.970265][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.977651][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.986167][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1185.993661][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.000863][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.008480][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.016974][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.024769][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.032050][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.039800][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.047202][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.054484][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.061848][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.069209][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.076577][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.084747][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.092018][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.099368][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.108689][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.116243][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.123709][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.131600][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.139187][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.146453][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.154017][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.161227][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.169611][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.176990][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.184424][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.192364][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.199631][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.207039][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.214856][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.222912][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.230378][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.237753][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.245161][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.255110][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.262501][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.269732][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.278139][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.285450][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.292773][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.300219][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.307975][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.315270][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x2 [ 1186.322809][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 17:41:08 executing program 3: syz_emit_ethernet(0x403, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x3, {0x3c7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x6558}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:41:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000)="18", 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, 0x0) 17:41:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000, 0x0, 0x5}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1186.331699][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.339115][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.347418][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 1186.355809][ T17] samsung 0003:0419:0001.0048: unknown main item tag 0xe [ 1186.363248][ T17] samsung 0003:0419:0001.0048: ignoring exceeding usage max [ 1186.378529][ T17] samsung 0003:0419:0001.0048: unexpected long global item 17:41:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340794b80040d8c560a067fffffff81004e220000000058000b4824ca944f647fffffff0028925aa8ee0000000000008000f0fffeffff09000000fff5dd000000100001000008ae4825ff0000040e05a5", 0x58}], 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x38, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x58}}, 0x0) [ 1186.387215][ T17] samsung 0003:0419:0001.0048: parse failed [ 1186.393457][ T17] samsung: probe of 0003:0419:0001.0048 failed with error -22 [ 1186.488752][ T4121] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 1186.499039][ T4121] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 17:41:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000070d00f9ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012001000010069703665727370616e0000001c000200080003003000000008001500000000000800160001000000"], 0x50}}, 0x0) 17:41:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5525, 0x80041) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec913ec1c7bb556701d33a056b8b960d48727603678f7bb661"], 0x10}}, 0x0) [ 1186.589380][ T4128] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1186.598156][ T4128] netlink: 'syz-executor.0': attribute type 22 has an invalid length. [ 1186.712756][T21719] ir-kbd-i2c 0-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 1186.774006][T21719] hdpvr 1-1:0.26: Could not setup controls [ 1186.781113][T21719] hdpvr 1-1:0.26: registering videodev failed [ 1186.821962][T21719] hdpvr: probe of 1-1:0.26 failed with error -71 [ 1186.834128][T21719] usb 1-1: USB disconnect, device number 76 [ 1186.859437][ T17] usb 6-1: USB disconnect, device number 85 [ 1187.242403][ T17] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1187.482318][ T17] usb 6-1: Using ep0 maxpacket: 16 [ 1187.602440][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.614345][ T17] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1187.630737][ T17] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 1187.640265][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:09 executing program 5: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:41:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000070d00f9ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012001000010069703665727370616e0000001c000200080003003000000008001500000000000800160001000000"], 0x50}}, 0x0) 17:41:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) unshare(0x400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000400)={0x0, r2}) 17:41:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5525, 0x80041) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec913ec1c7bb556701d33a056b8b960d48727603678f7bb661"], 0x10}}, 0x0) [ 1187.651307][ T17] usb 6-1: config 0 descriptor?? 17:41:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340794b80040d8c560a067fffffff81004e220000000058000b4824ca944f647fffffff0028925aa8ee0000000000008000f0fffeffff09000000fff5dd000000100001000008ae4825ff0000040e05a5", 0x58}], 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x38, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x58}}, 0x0) 17:41:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000002400)) [ 1187.701627][ T17] usb 6-1: can't set config #0, error -71 [ 1187.745351][ T17] usb 6-1: USB disconnect, device number 86 [ 1187.767383][ T4199] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1187.776496][ T4199] netlink: 'syz-executor.0': attribute type 22 has an invalid length. 17:41:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:10 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) 17:41:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000070d00f9ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012001000010069703665727370616e0000001c000200080003003000000008001500000000000800160001000000"], 0x50}}, 0x0) 17:41:10 executing program 5: waitid(0x83b895581628fca4, 0x0, 0x0, 0x4000000a, 0x0) 17:41:10 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x3, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast1, [], "0200000000000000"}}}}}}}, 0x0) 17:41:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @empty}}) 17:41:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000070d00f9ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012001000010069703665727370616e0000001c000200080003003000000008001500000000000800160001000000"], 0x50}}, 0x0) [ 1188.342872][ T2889] usb 4-1: new high-speed USB device number 62 using dummy_hcd 17:41:10 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x3, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast1, [], "0200000000000000"}}}}}}}, 0x0) 17:41:10 executing program 5: unshare(0x400) r0 = socket(0x2000000000000021, 0x2, 0x2) connect$unix(r0, 0x0, 0x0) 17:41:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5525, 0x80041) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec913ec1c7bb556701d33a056b8b960d48727603678f7bb661"], 0x10}}, 0x0) 17:41:10 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000100)) [ 1188.722530][ T2889] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1188.731155][ T2889] usb 4-1: config 0 has no interface number 0 [ 1188.737509][ T2889] usb 4-1: config 0 interface 105 has no altsetting 0 [ 1188.744592][ T2889] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1188.754052][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:10 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x3, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast1, [], "0200000000000000"}}}}}}}, 0x0) [ 1188.878903][ T2889] usb 4-1: config 0 descriptor?? 17:41:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x22, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x98) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:41:13 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) 17:41:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000100)) 17:41:13 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x3, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast1, [], "0200000000000000"}}}}}}}, 0x0) 17:41:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5525, 0x80041) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec913ec1c7bb556701d33a056b8b960d48727603678f7bb661"], 0x10}}, 0x0) [ 1191.032520][ T2889] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1191.043709][ T2889] asix: probe of 4-1:0.105 failed with error -71 [ 1191.116912][ T2889] usb 4-1: USB disconnect, device number 62 17:41:13 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000100)) 17:41:13 executing program 5: clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000001c0)=""/95, 0xfd96, &(0x7f0000000240)=""/8}, 0x41) [ 1191.585934][ T2889] usb 4-1: new high-speed USB device number 63 using dummy_hcd 17:41:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000100)) [ 1191.672472][T31657] usb 2-1: new high-speed USB device number 79 using dummy_hcd 17:41:13 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) [ 1191.964478][ T2889] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1191.973215][ T2889] usb 4-1: config 0 has no interface number 0 [ 1191.979637][ T2889] usb 4-1: config 0 interface 105 has no altsetting 0 [ 1191.987346][ T2889] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1191.996800][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x34de) [ 1192.077292][ T2889] usb 4-1: config 0 descriptor?? [ 1192.088222][T31657] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1192.097285][T31657] usb 2-1: config 0 has no interface number 0 [ 1192.103706][T31657] usb 2-1: config 0 interface 105 has no altsetting 0 [ 1192.110670][T31657] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b 17:41:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0xc806}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @rand_addr=0xffffffffdd3e1ee2}}) 17:41:14 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0x75, 0x4, 0x8, 0x4b8, 0x202, 0x6736, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x17, 0xe6, 0xf1}}]}}]}}, 0x0) [ 1192.120096][T31657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:14 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) [ 1192.245150][T31657] usb 2-1: config 0 descriptor?? 17:41:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x5, 0x0, 0x0, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) [ 1192.542781][ T17] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1192.782217][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1192.902457][ T17] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 1192.911720][ T17] usb 3-1: config 0 has no interface number 0 [ 1192.918411][ T17] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=67.36 [ 1192.927836][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.937888][ T17] usb 3-1: config 0 descriptor?? [ 1193.186272][T31714] usb 3-1: USB disconnect, device number 70 [ 1193.952293][ T17] usb 3-1: new high-speed USB device number 71 using dummy_hcd 17:41:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @random="d2e9cb2a0b7c", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@sack={0x13, 0x1}, @eol, @exp_smc={0xfe, 0x6}, @generic={0x0, 0x8, "3aeb5b386552"}]}}}}}}}}, 0x0) [ 1194.182636][ T2889] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1194.193641][ T2889] asix: probe of 4-1:0.105 failed with error -71 [ 1194.202702][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1194.240488][ T2889] usb 4-1: USB disconnect, device number 63 [ 1194.342556][ T17] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 1194.351143][ T17] usb 3-1: config 0 has no interface number 0 [ 1194.358226][ T17] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=67.36 [ 1194.367696][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.380100][ T17] usb 3-1: config 0 descriptor?? 17:41:16 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f9f407000904ff0200070208000100ffffffff0800000000000006", 0x24) 17:41:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x400000000000085, 0x0, 0x0, &(0x7f0000000000), 0x40000000) 17:41:16 executing program 5: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa9, 0x0, &(0x7f0000000000)) [ 1194.404447][T31657] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1194.415288][T31657] asix: probe of 2-1:0.105 failed with error -71 [ 1194.475640][T31657] usb 2-1: USB disconnect, device number 79 17:41:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="1f22bc2eeb4c775ff693509fa00f29b88e28677a3a497e612823b6556e249dd095cb38ba61cbe208be8101c1a58b9309ad669accbe15b3", 0x558}, {&(0x7f0000000340)="cb6c1549dafaac942062fc603a3d89ddad9cb17ea444c2f2371c9e928037117c0e", 0x21}], 0x2}, 0x0) 17:41:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 17:41:16 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) [ 1194.652636][ T2889] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1194.666124][ T17] usb 3-1: USB disconnect, device number 71 [ 1194.922325][T31657] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1195.012516][ T2889] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1195.021186][ T2889] usb 4-1: config 0 has no interface number 0 [ 1195.027566][ T2889] usb 4-1: config 0 interface 105 has no altsetting 0 [ 1195.034600][ T2889] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1195.043950][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.054630][ T2889] usb 4-1: config 0 descriptor?? 17:41:17 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0x75, 0x4, 0x8, 0x4b8, 0x202, 0x6736, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x17, 0xe6, 0xf1}}]}}]}}, 0x0) 17:41:17 executing program 5: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 17:41:17 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) [ 1195.293364][T31657] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1195.302543][T31657] usb 2-1: config 0 has no interface number 0 [ 1195.308816][T31657] usb 2-1: config 0 interface 105 has no altsetting 0 [ 1195.316014][T31657] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1195.325452][T31657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.375323][T31657] usb 2-1: config 0 descriptor?? [ 1195.522446][ T17] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1195.762254][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 1195.882543][ T17] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 1195.891511][ T17] usb 3-1: config 0 has no interface number 0 [ 1195.898203][ T17] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=67.36 [ 1195.907827][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.917816][ T17] usb 3-1: config 0 descriptor?? [ 1196.169537][T31714] usb 3-1: USB disconnect, device number 72 17:41:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="1f22bc2eeb4c775ff693509fa00f29b88e28677a3a497e612823b6556e249dd095cb38ba61cbe208be8101c1a58b9309ad669accbe15b3", 0x558}, {&(0x7f0000000340)="cb6c1549dafaac942062fc603a3d89ddad9cb17ea444c2f2371c9e928037117c0e", 0x21}], 0x2}, 0x0) [ 1197.272675][ T2889] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1197.283261][ T2889] asix: probe of 4-1:0.105 failed with error -71 [ 1197.311842][ T2889] usb 4-1: USB disconnect, device number 64 17:41:19 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(0x0, 0x0) sendfile(r0, r0, 0x0, 0x5f6c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x3, 0x382, [0x20000bc0, 0x0, 0x0, 0x20000d16, 0x20000ee2], 0x0, &(0x7f0000000880), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x18, 'dummy0\x00', 'tunl0\x00', 'erspan0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @ip={'ip\x00', 0x20, {{@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x5, 0x76, 0x1, 0x11, 0x4e22, 0x4e21, 0x4e22, 0x4e24}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0xb0516fc7450772f8, 0x19, 0x8906, 'bcsf0\x00', 'bcsh0\x00', 'syz_tun\x00', 'veth0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0xff, 0x695efd6bc1105223], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x16, 0x40, 0x806, 'hwsim0\x00', 'ip6erspan0\x00', 'eql\x00', 'irlan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x4}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x3fa) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() r9 = gettid() tkill(r9, 0x1000000000016) tkill(r8, 0x3a) r10 = syz_open_procfs(r8, &(0x7f0000000b00)='status\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000b40)={0x0, r10}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17:41:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:41:19 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) 17:41:19 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0x75, 0x4, 0x8, 0x4b8, 0x202, 0x6736, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x17, 0xe6, 0xf1}}]}}]}}, 0x0) 17:41:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="1f22bc2eeb4c775ff693509fa00f29b88e28677a3a497e612823b6556e249dd095cb38ba61cbe208be8101c1a58b9309ad669accbe15b3", 0x558}, {&(0x7f0000000340)="cb6c1549dafaac942062fc603a3d89ddad9cb17ea444c2f2371c9e928037117c0e", 0x21}], 0x2}, 0x0) [ 1197.542605][T31657] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1197.553771][T31657] asix: probe of 2-1:0.105 failed with error -71 17:41:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="1f22bc2eeb4c775ff693509fa00f29b88e28677a3a497e612823b6556e249dd095cb38ba61cbe208be8101c1a58b9309ad669accbe15b3", 0x558}, {&(0x7f0000000340)="cb6c1549dafaac942062fc603a3d89ddad9cb17ea444c2f2371c9e928037117c0e", 0x21}], 0x2}, 0x0) [ 1197.616045][T31657] usb 2-1: USB disconnect, device number 80 17:41:19 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) [ 1197.762378][ T2889] usb 4-1: new high-speed USB device number 65 using dummy_hcd 17:41:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000000c000/0x1000)=nil], &(0x7f0000000080), 0x0, 0x0) 17:41:19 executing program 4: mknod$loop(0x0, 0x4400, 0x0) [ 1197.882459][T31714] usb 6-1: new low-speed USB device number 87 using dummy_hcd 17:41:20 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000000180)=[{0xcd, 0xb, 0x0, 0xfd, @time={0x0, 0x1c9c380}, {}, {}, @connect}], 0x30) [ 1197.984334][T12317] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1198.032556][T31657] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1198.125289][ T2889] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1198.134034][ T2889] usb 4-1: config 0 has no interface number 0 [ 1198.140249][ T2889] usb 4-1: config 0 interface 105 has no altsetting 0 [ 1198.147832][ T2889] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1198.157077][ T2889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.166126][T31714] usb 6-1: Invalid ep0 maxpacket: 64 [ 1198.174171][ T2889] usb 4-1: config 0 descriptor?? [ 1198.234512][T12317] usb 3-1: Using ep0 maxpacket: 8 [ 1198.322338][T31714] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 1198.362896][T12317] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 1198.371325][T12317] usb 3-1: config 0 has no interface number 0 [ 1198.377799][T12317] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=67.36 [ 1198.387232][T12317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.397825][T12317] usb 3-1: config 0 descriptor?? [ 1198.432374][T31657] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1198.440790][T31657] usb 2-1: config 0 has no interface number 0 [ 1198.447339][T31657] usb 2-1: config 0 interface 105 has no altsetting 0 [ 1198.454362][T31657] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1198.463801][T31657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.480886][T31657] usb 2-1: config 0 descriptor?? [ 1198.592386][T31714] usb 6-1: Invalid ep0 maxpacket: 64 [ 1198.600397][T31714] usb usb6-port1: attempt power cycle [ 1198.656362][T12317] usb 3-1: USB disconnect, device number 73 [ 1199.312320][T31714] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 1199.402795][T31714] usb 6-1: Invalid ep0 maxpacket: 64 [ 1199.552423][T31714] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 1199.652466][T31714] usb 6-1: Invalid ep0 maxpacket: 64 [ 1199.658348][T31714] usb usb6-port1: unable to enumerate USB device 17:41:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x1}) 17:41:22 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x1f) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x1a4000962) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 1200.392313][ T2889] asix 4-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1200.403945][ T2889] asix: probe of 4-1:0.105 failed with error -71 [ 1200.454299][ T2889] usb 4-1: USB disconnect, device number 65 17:41:22 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 17:41:22 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0x75, 0x4, 0x8, 0x4b8, 0x202, 0x6736, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x17, 0xe6, 0xf1}}]}}]}}, 0x0) 17:41:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc02, &(0x7f0000000040)=0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x40003) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 17:41:22 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 17:41:22 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x1f) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x1a4000962) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 17:41:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x70f000, 0x0}) [ 1200.720420][T31657] asix 2-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1200.731546][T31657] asix: probe of 2-1:0.105 failed with error -71 [ 1200.854932][T31657] usb 2-1: USB disconnect, device number 81 [ 1200.910891][ T4498] sctp: [Deprecated]: syz-executor.5 (pid 4498) Use of int in max_burst socket option deprecated. [ 1200.910891][ T4498] Use struct sctp_assoc_value instead 17:41:23 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @empty=[0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\b ', 0x14, 0x11, 0x0, @dev, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) 17:41:23 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x1f) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x1a4000962) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 17:41:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' ', @ANYBLOB="00000000dc2cb92810904fa9e5f21301ce646ba1"], 0x2}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1201.083904][ T17] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1201.092445][T21719] usb 3-1: new high-speed USB device number 74 using dummy_hcd 17:41:23 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f88000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000088a000/0x2000)=nil) 17:41:23 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 17:41:23 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x1f) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x1a4000962) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 1201.337432][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 1201.343650][T21719] usb 3-1: Using ep0 maxpacket: 8 17:41:23 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) [ 1201.466120][ T17] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1201.475470][ T17] usb 1-1: config 0 has no interface number 0 [ 1201.481883][ T17] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=6f.ee [ 1201.492918][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.502430][T21719] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 1201.512214][T21719] usb 3-1: config 0 has no interface number 0 [ 1201.518475][T21719] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=67.36 [ 1201.527779][T21719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.571794][ T4518] sctp: [Deprecated]: syz-executor.5 (pid 4518) Use of int in max_burst socket option deprecated. [ 1201.571794][ T4518] Use struct sctp_assoc_value instead [ 1201.615668][T21719] usb 3-1: config 0 descriptor?? [ 1201.625917][ T17] usb 1-1: config 0 descriptor?? [ 1201.690915][ T17] option 1-1:0.89: GSM modem (1-port) converter detected [ 1201.778556][ T4531] sctp: [Deprecated]: syz-executor.1 (pid 4531) Use of int in max_burst socket option deprecated. [ 1201.778556][ T4531] Use struct sctp_assoc_value instead [ 1201.860259][T31657] usb 3-1: USB disconnect, device number 74 [ 1201.871852][ T17] usb 1-1: USB disconnect, device number 77 [ 1201.880141][ T17] option 1-1:0.89: device disconnected 17:41:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) memfd_create(0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 17:41:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543, 0x0, 0x5700}, "033c868cc0b585448feb7f0b957c28e544f0f5424f8b825991959658bdaf4ec7d5a7eb151fb515188b0f4bd6a8480654bcf34a6eb0bc2fd858d283c386344134a459261420f5980470445992a86677fb184c75fe1914de3b3a649cff43d8bebfbbd3e26ae8b1c8ae324d3c12827ce90779a4667f1e7bfa69e464ec12d745b72b51fe24adbea0bcc106f99f709f8a02db24e42f79d473c4abc7342e5427990cefe8996b41a2a3e75d27ac2602d5a81e59f86f1280d1e7e9193d4c5adabf85be0718c447be954449c8aa6c374a065ce77212555a44605574db4cd11ef0aedb4cb10102248ae5b905ff58d9bd435db07383348354fe9e55439201666ce1816ea43f80f9c622bb3800079c33d592e795ec3e50540317da813bda59ca8febac939dce7e4632e32b2565889c463f3707625bc3aab1f28731425cfee656d3bdef027041776adfd4cfb623dfef07c11cf150bffbd5a01d42e616bb2f5db484b8f3d79213ce7bd189f4dccbeffd79bf506b562abd6270daf9a881297493e649719d753a20d34dbb875a37bf46b97300b2b0c7b9bc0f853100d29394eba9981423359e478d01a0bb0434bc8cdb9f304c5792373494a79a13af9ef79f2af008d5397227ac8a96d8546bb57cf4abbe8d317446e9988d2179899f64fb8f3beace1d654cf6380f020b563d5efa6ee7988d1ff1eb1bf1ab10031eb91dec1e9c03b2b0b9348cc78190187bd4a44211b0cbb5f71ebeda812fda95099fd0ff479ba6e88a7558b3a1c4cfed5f63bda60fdd8169d51f02e4540f8918e8b1bb91f0b89ef60d311dff0fc7302ba8dc467c77db5d858cb2c0fe77a97eca1a56a0d5e612de2e66dd0b961ec2375c2cdef76c5b4b1adcbf1a351bbcd604c3bd211477365d8593d27d00ba1e00644d86f9aebe9ab483debdf2baa3c9f6141dbb6b44890f17193d3786e6f1fb5e16369951f56b98042f022abd89ac9960da769fd41812f7c7403c308f2f50f6f0688904fb6167a5d1772d1b57b65b2e252ffd5873e7afe6d80fab9f09b9fe15ea8c4627484020bd95348a3ebcef4ed15df332842ab122a6351bc7e2468bf70bd9457c45c05d0549464929b5856252e6bff1a2994dbb8d5c4efd2690b7a37ce299f322539fe319c8f108dd3390d23f25b31a2a32bfb932815caf9f5a84fb4e955611ada2cd6ac09048915c396ae19182444a842a47328a0f7941c9670d21643df8a244edd68ea1dd8345b4c14e72f7d46f173b73075f3346b515aac86caed3ea3b1d37a7e9477affd2a4c4cbd9df5b7dc8b257d4b73c0bbd800b579badf52ae54160f3f18b216768fe1eda5928d7a5ecd0fe34787f68b19af5b8b4bb1e941bc067dcacff93b1e402f440008d9ce65a0e58614282ad7d8adb38b8c19eb9ccf17b0173ea85b3aaa6f6a04c105d50d073ba246fbd46f9dcd50c662e49ad745a37dcd2fdaf36b9e73dfe4566671e747ec08cb273582ce3b7fc303a4f1e6327ad0fdd7d98460e4fcab0381bdb2e9ad6a13b0a04137cc1b89a7255b3c025427f860a4f28be716791b927191ae9ce9145a0ecfaa6593067bfba895d93fb41166ef7a913135dc658cf8a433bda2e39e726e7a294178dace3bdd5d63d836bcf29190113bca45d769f30ae6f10c81eebc9ca5003e2735305e8627b37329ec9b1f6e8d8ee22adf45a331b34b4e61a06970a5cab6cd3630b7b499261087a472d85b764bff568242d2b1270ecc3fcb4d278cff03a51f2c42b99ce140be7418788127d8d56055b73a6e73c316b173f5f1675b3585d96e88f1e2f55c93cb9bd0fdd84974341cbd1d05a080f3c6474d93b6959063620f498b7499c844fccde043e8296f74ec575b0f43c78548d4a5dcea7686a761982db350c7af1b9f5feb08947c67b3754d4b625964a3ac502d95708893dffe231ce5867425a439b18b3605c34e2cb151c3dabc540239ff0c4c504d0a7bdb0c779c1dd6804b5f613145ce7913801bef08ba3c93b8739e14bc7d79ec745609e60fb5927c7d7ce9036586230cbbf67796fc419e659f421f5d353230c7fc3fa031cd8795b326d311fa265a6432e28e46da42bc1e86476a8f851d8343e8bbffbefd42a5c93657f60a03272a33378125e9ae47dc3248c0ffcd383158e0abae54c53ec5ce9d3ce0dca7b9e783d28984ab7b222a88342d7488210bb7731a5b8dce937ac6ee92d9ccf04d28877eefe6992f025779b51e15c7464482f3533ced2453f0f33dea9d3ce1136bf25d118269586690624420bfedda8f6ffa4639bf551d65823cb08c78eda94549134a1d7e5be36d3eb733d68ab2b65f291fd8256b1a5c39c014094dcc95e39994f82a8c1f53e1fc620d774889e5a014ac345ddc495026d679c9491c6adcd4f04fb99e53a2c52886ba31ee706a84f86483621f0807c4ab58ef8be10b1148db32489b58edc81a07b04107113818c6e8f348aee2da9e11e5c61cc948ccd5500f2228cb627ae71c1f78e2508d63d1938c2f5ffd1e0e2b4fb97fe28643580a698df15e436ff4cc0a88497433cc54b0c81c368fe96d32d24439fe1c10fce1557a6e3c4cca31c7fabede562a19b6b645152c9fa1742743beab33b0abf16b1ec44a6870e325d3b1c75555a58bd9d8ae3054674f872f191e95786acfc1c5f81d9f38dfcd84cc9e11c59042f5aef670dd3985f359c64ce9815b121288fda2194310162740176e1c9615bf0285a944f05098dbd9bb1edddcd058f9ca7893c3a5a50bdaad5f203b9448e4dddc8e99ef06848eb441889c9fe733d42b68f884dd5ec3f6eebaac9e44fd550ddb12d81a415fcbb7754b052154d7a92ac285d2bcc8932f1ea912486479e4b143a1a201b5257375509dc3ad36d538dc676b62296ef2162fd05f106522c583410ad7462106ded7e1bda9bb9d5e938590bcc84a387b31bb6207e79b2e20b633d165b4c270c86edd0b679cd4fdc16a4d75a0b6be9d536cbf8ffc9d1b26a2d89e6a8b3fc12d6ee3cdad67853a25a9147ec45d75aa2ae441a865eb11310ef97eb2eba82a23d5f1fc5e3c3b13c100d93c3fb86d536ee66065e503b7068640724dbbc977f43124d077673758d75c6bd31ab149733a030378d72f9d8d79ef45bd7bff6f49b1605adae7f46582e66a1d596675539df2335ecb5a6b8f7228098a9bd6ad658fb79897bfb8b3e986bd3dd3cc767a587f6a04e2ec139f1c61ab1ed00d5be0f6fd1cbef7e034012d04cecdce8cc2463e016a781bcb0e41de42359e1366d538eb918fe22c6b4d6280b4d8b393d741cd8b05b63035bcf7e9f92a98dc0428b7714dbab4789b3f8c79d438f0eae3cd1380d1f35b8aef3a012bb26b76befdb923d53481c02f90edd0c0912378cc6b23b0d6b9ba34afa3b3a23bd806e586887919193adee5bf2e5ea096592df747b0f866a1852fd2183ff6eedda3a6a9400dcb0af43a773bb988f0272c2a28d3a637b4a9916a64bbb4ed163b862b71b1583f81b6cc88aed8ef8edd41756ff1f4c97674c68a84e7b4812220d2f5939e62a3eee9e7884af3d0f7e2453c27a5157581cfc785680877a2308649d8fbc3ffae0d5541d90c801771efae27ec6427e84b562dadea2c49e0c78552bb95e91cf7b21dfe0a110b3b0bddf911fad182c09283be2aa35e090d06fa8876f9ba11597f7f7551e8c496cb56188e4a770cb3916e659e0d6900509c1040973553d2bb888d4b394f5db1c4c473955d3004ad868c502f23f5d2f1f04c9ff3f98e830400a0f033edef20a6f1e190f065a6828b83f971c282e51bfea9c603192e2a500a02ae40c91578773c381749f242e0aec3fa45408b9711681880a4e125d90cf5bfa728c7340a490053142caa35e913d0e3d8fdb0bbd70144007b2a0e58f3c3d075a750812303b2f527b232af0b9a832e7f1f20a75f637d1b19afe59e52c758583a4fdeab9bb6041d834eeffcb8c710fda11054ab4c09d06ff3228fca2a8558855779f1a1d78103a99d5975fb4122603abffb7bf351df67647f74a92d4f2cc46c665104f89c1e5a0140b388c49f92382fad939806bd5341c8532d06256afb6a6e1629253c7d35ab5949f75db8df38777964ffc0474b09b611a3efd63efba1283e468bc8b1ee428acb0bdd91cc821054dbf584b579a3c7b520fe31f797d13622ae6c74be825dd6ab9c9d4c547a7bb45db6c9ee3b9f2bace29bf80e3b72c4e18cf1ca8655bbff8940354d5d126510c6b6edb650da9183af2df9e71cce6149e99cb61ccbefd34744501a5d3b4a1fbd77426466ded547d8e3fc29a6bce204c74b8171fc22c5d9f76d3", [[], [], [], []]}, 0xff0) [ 1202.682367][ T17] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1202.922301][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 1203.042436][ T17] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1203.050622][ T17] usb 1-1: config 0 has no interface number 0 [ 1203.057033][ T17] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=6f.ee [ 1203.066562][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.076127][ T17] usb 1-1: config 0 descriptor?? [ 1203.116385][ T17] option 1-1:0.89: GSM modem (1-port) converter detected [ 1203.314279][T31657] usb 1-1: USB disconnect, device number 78 [ 1203.321464][T31657] option 1-1:0.89: device disconnected 17:41:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 17:41:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 17:41:25 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 17:41:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/233, 0xe9}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/145, 0x91}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1060}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:41:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0xf20d, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x9, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) 17:41:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') [ 1203.965804][ T4559] sctp: [Deprecated]: syz-executor.1 (pid 4559) Use of int in max_burst socket option deprecated. [ 1203.965804][ T4559] Use struct sctp_assoc_value instead [ 1204.001492][ T4564] sctp: [Deprecated]: syz-executor.5 (pid 4564) Use of int in max_burst socket option deprecated. 17:41:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x3) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) 17:41:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 1204.001492][ T4564] Use struct sctp_assoc_value instead 17:41:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/233, 0xe9}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/145, 0x91}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1060}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:41:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 17:41:26 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 17:41:26 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 17:41:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/233, 0xe9}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/145, 0x91}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1060}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:41:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:41:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 1204.542887][ T4586] sctp: [Deprecated]: syz-executor.1 (pid 4586) Use of int in max_burst socket option deprecated. [ 1204.542887][ T4586] Use struct sctp_assoc_value instead 17:41:26 executing program 3: setrlimit(0x7, &(0x7f00000004c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x2) [ 1204.648889][ T4588] sctp: [Deprecated]: syz-executor.5 (pid 4588) Use of int in max_burst socket option deprecated. [ 1204.648889][ T4588] Use struct sctp_assoc_value instead 17:41:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 17:41:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/233, 0xe9}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/145, 0x91}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1060}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:41:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 17:41:27 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5, 0x4}) 17:41:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc0801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x01\x00\x01\x00\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6a\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf1X\x8bk9fx\xe7\xba\x156\x04\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4m\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd7|\xde^U\x11\x02\x1dm\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8a\xca\x91\xe5u#D\xbd\xdfCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R\x01\x00\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f\f\x9d\xcb\x11\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\r=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x1bR\r>\xd1P\x10;\xb9o\xc2>\t\x0eZ9\x0f\xa1\xc2\x96\x1c\xff\xca\x98\xa8$sj\x99\b\xc7\x94F \xfd\x11H\xc3\xaaM\x8a\x98\x96\xd5\xab\xc6\x01\n1\bN\x14\xd5\fp\x8e\xd7\n^\xa0\xbfP\xd4\xd0~\xach#5\xd9\x11\xba\xb9Z\x95\xe7z\xec\xf7\x01V\xce\xcd\xc39\xb3\xa2\x8b\xd6H\x9bhsK\xbd\x9a/\xc9\xd3\x9f\xbb') write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x0, '\x03\x0e\x80I?\x1e\xc2\xce\xc9`~\b\x06\xc4W\x8a\xd7\x00k\x00!\x05\x00\xcd\x02\x00\x93\xdd\x86\xdd\x00\x00\x88H\xba\xadlh\x83B\xb9\xc3\x9e\x80\xac\xa4\xb1\xd8\xc4\x01v\xec\t\xb4(\x04R\xfdy\x86z?_\xa4R\x06\r)\x7f\x94\x01\xb4\xe3^\xb9\xe6\x8b\x9a\xdf\xd1xQJ\x94\x1a\xf9o\xe5@U\x16\x80\x10\x7f\xdfy\xd1\xaf\x8fNV0\x9a\xc9s=@\xcc\x0f\xf1\x19\x99\xc3\xc3t\x0f\bZ\x00\x00\x00\x00\x00\x00\x00'}]}, 0x7f) 17:41:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@dev, @multicast1, 0x0, 0x1e7}, 0x10) 17:41:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x9, 0x2}]]}}}]}, 0x3c}}, 0x0) 17:41:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:41:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1205.263707][ T4625] device nr0 entered promiscuous mode [ 1205.290926][ T4632] validate_nla: 6 callbacks suppressed [ 1205.290949][ T4632] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 17:41:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000230007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 17:41:27 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 17:41:27 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x2, &(0x7f0000000100)={0x0, 0x10}) 17:41:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x6f01}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 17:41:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0) 17:41:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) [ 1205.801900][ T4630] device nr0 entered promiscuous mode 17:41:27 executing program 0: r0 = socket$inet6(0xa, 0x10000000003, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x2}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:41:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x90, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 17:41:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000000)=0xffffffffffffff45) 17:41:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:41:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:41:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:41:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000240)={0x0, 0x0, "e44065cbada5e368b71a4d23ef6372d1c6f0b05a4270e7f08e65ffa78eed0b66"}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="5f7d527cfdbff653aa9a29f36d45f9c210c6ccca704152406bec2d08272435681779b11cdf2d93ed03795ecf89d42717578686ac0bb9cdbab6823ff9286b5c98dcc8143fb8abe5ff1422a32748251c9b49aab270beae8cf5b7c5f4f75512fa51f22a14e57ad49a49172ea3bc25ac313f03710c123449b882e95d2bf5554289fe54b2ec9cf95b27c5d18e8c3457182379bd551ecaebb00929f20bfbf2372bfea822e48d", 0xa3, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x43, 0x4) sendto$inet6(r0, &(0x7f0000000140)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5c0184374a7ffe4ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21d913a23bb7", 0x78, 0x0, 0x0, 0x0) 17:41:28 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:41:28 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000380)='\x00') 17:41:28 executing program 5: r0 = socket$inet(0x2, 0x40000000003, 0x800000800000001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x100, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x160) 17:41:28 executing program 3: r0 = memfd_create(&(0x7f0000000300), 0x4) fcntl$addseals(r0, 0x40a, 0x0) 17:41:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x0, [0x277, 0x2]}) 17:41:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309f256c910e31e81dcd3cd8a13744fc2874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:41:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)={0xc7, 0x34, 0x829, 0x0, 0x0, {0x3, 0x40000}, [@nested={0x18, 0x0, [@typed={0x3b, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 17:41:29 executing program 5: r0 = socket$inet(0x2, 0x40000000003, 0x800000800000001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x100, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x160) [ 1207.025918][ T4750] netlink: 107 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1207.069979][ T4752] netlink: 107 bytes leftover after parsing attributes in process `syz-executor.3'. 17:41:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x175, 0x0, 0x140], [0x3a]}) 17:41:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x520, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0xe6c}, {&(0x7f0000000240)=""/147, 0x71f}], 0x2, &(0x7f0000002740)=""/218, 0x52}}], 0x400008c, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 17:41:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042bbd7000fcdbdf25060000000c00060004000200040002009c0005000c00020008100200e30600001c00020008000200000000000800030006000000080002000200000008000100696200000800010065746800080001006962000008631d96f9e02e004c0afb466c000200040000003c00020008000300060000008800020005000000080002000500000008000400050000000800030004000000080004000000008008000000000000000800010075647000b400050008000100756470003c00020008000300fdffffff0800030009000000080004000900000008000200f7ffffff08000100010000000800040000000000000000002b9f00001c00211000000800e8ff170000001c00020008000200060000000800c0859db70000080001000e00000034000200080002000400000008000200000001000800040004000037523b32201e84fbea172e4a0008000200000000000800040007000000080001000500000039748250b2301710000600040002000800010008000000ad2beb0a82292e7dc9a0d2f3190c3840699a6484d759afce590700d7c46c4a2ee0eb4bcfebad626b15003e4b7146f7f9058fde398b103852bf3fbeac1ad9b5b71056cd376b965311e7f5167c308ae94fb3f13fc08a653cb71162291035501b549c06d2f28e91d48fdaf1391607bbe931a4120a2b3a4c8052d67b321aa703a555a8ddfe2203c0fb6ff9754f5b052be92fec530106bbe40906ac3b417c8ccb183676a5de49e30100eabb763321a0bf0fd37f7aad562201a2a6634743f4c516d98d758f8f3214aa026ad3ed62277707e48d7dd582acc872a9ea84e5151333dde8b02e3f025c25dbbd8ae1808d1bfa929ae32d77b8330c2957c85cdfe981310c299dfc45efe523e039f9ec4576b918037f51996b0d6f6ecaf30aa3e6412737c71a98c671590305c59a53e0073fcdb926ca01df3b6b071651"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:29 executing program 5: r0 = socket$inet(0x2, 0x40000000003, 0x800000800000001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x100, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x160) 17:41:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x6, &(0x7f0000000000)={@dev}, 0x3) 17:41:29 executing program 5: r0 = socket$inet(0x2, 0x40000000003, 0x800000800000001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x100, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x160) 17:41:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x7d, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}], 0x10) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:41:29 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x0, 0x0, &(0x7f0000000000)=0x52cb8df6cc99dedf) [ 1207.721790][ T4776] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:41:29 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 17:41:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x5, 0x0, 0x2}) 17:41:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:30 executing program 4: unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x7d, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}], 0x10) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 1208.246722][ T4808] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:41:30 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 17:41:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x5, 0x0, 0x2}) 17:41:30 executing program 4: r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001bff4)) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) 17:41:30 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f021fff0180000000000000000000000000000600090000000000", 0x3fd) 17:41:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x7d, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}], 0x10) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 1208.517928][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:41:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x5, 0x0, 0x2}) [ 1208.567904][ T4838] IPVS: ftp: loaded support on port[0] = 21 17:41:30 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7) close(r0) 17:41:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x821, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x7, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 17:41:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x7d, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}], 0x10) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 17:41:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x5, 0x0, 0x2}) [ 1208.845071][ T4826] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:41:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x88, 0x1000000000067, &(0x7f0000b67000), &(0x7f0000000040)=0x4) [ 1209.357895][ T4838] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:41:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0x288, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc}, @tmpl={0x1c4, 0x5, [{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@empty}, {{@in=@broadcast}, 0x0, @in6=@mcast2}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}, {{@in=@dev}, 0x0, @in=@dev}, {{}, 0x0, @in6=@mcast2}]}]}, 0x288}, 0x1, 0xfffff000}, 0x0) 17:41:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="b1", 0x1}], 0x1}, 0xc30) 17:41:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:31 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) dup2(r0, r4) 17:41:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff61a4f0ff00000000b7060000000000013d400300000000006506000001ed000071185400000000006c64000000000000630a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 17:41:31 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)) read(r3, &(0x7f0000000100)=""/11, 0xfe8f) syz_open_pts(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) 17:41:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="b1", 0x1}], 0x1}, 0xc30) 17:41:31 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xff33}, 0x0) 17:41:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x15) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), 0x0, 0x8) 17:41:31 executing program 0: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf3, 0x0, &(0x7f0000000000)) 17:41:31 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)) read(r3, &(0x7f0000000100)=""/11, 0xfe8f) syz_open_pts(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) [ 1209.813009][ T4878] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:41:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="b1", 0x1}], 0x1}, 0xc30) 17:41:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) read(r1, 0x0, 0x47c) 17:41:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000000c0)=0x3001) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xeb, 0x8d, 0xe1, 0x2008, 0x7a69, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9b, 0xe1, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 17:41:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af04, &(0x7f0000000240)) [ 1210.175760][ T483] bond0 (unregistering): Released all slaves 17:41:32 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='#! ', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17:41:32 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)) read(r3, &(0x7f0000000100)=""/11, 0xfe8f) syz_open_pts(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) 17:41:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="b1", 0x1}], 0x1}, 0xc30) 17:41:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1210.452290][T31657] usb 6-1: new high-speed USB device number 91 using dummy_hcd 17:41:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x28e, 0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) 17:41:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x3c0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0x8) sendfile(r0, r1, 0x0, 0x320c) 17:41:32 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)) read(r3, &(0x7f0000000100)=""/11, 0xfe8f) syz_open_pts(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) 17:41:32 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f004000}) read(r1, &(0x7f00000002c0)=""/4096, 0x1000) [ 1210.692447][T31657] usb 6-1: Using ep0 maxpacket: 8 [ 1210.812667][T31657] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 1210.821980][T31657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x28e, 0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) [ 1210.873536][T31657] usb 6-1: config 0 descriptor?? 17:41:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x0, 0x0, 'none\x00'}, {@remote, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x2) [ 1210.931572][T31657] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1211.356261][T31657] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1211.367341][T31657] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1211.376200][T31657] usb 6-1: media controller created [ 1211.416640][T31657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1211.471720][T31657] tc90522 0-0018: Toshiba TC90522 attached. [ 1211.485804][T31657] usb 6-1: DVB: registering adapter 0 frontend 0 (Toshiba TC90522 ISDB-T module)... [ 1211.496118][T31657] dvbdev: dvb_create_media_entity: media entity 'Toshiba TC90522 ISDB-T module' registered. [ 1211.553024][T31657] dvb_pll: probe of 2-0060 failed with error -12 [ 1211.613802][T31657] usb 6-1: USB disconnect, device number 91 [ 1212.102236][T31657] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1212.352278][T31657] usb 6-1: Using ep0 maxpacket: 8 [ 1212.483067][T31657] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 1212.492248][T31657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.501392][T31657] usb 6-1: config 0 descriptor?? [ 1212.546981][T31657] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1212.755702][T31657] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1212.766758][T31657] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1212.775267][T31657] usb 6-1: media controller created [ 1212.802998][T31657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1212.849944][T31657] tc90522 0-0018: Toshiba TC90522 attached. [ 1212.860546][T31657] usb 6-1: DVB: registering adapter 0 frontend 0 (Toshiba TC90522 ISDB-T module)... [ 1212.870335][T31657] dvbdev: dvb_create_media_entity: media entity 'Toshiba TC90522 ISDB-T module' registered. [ 1212.932855][T31657] dvb_pll: probe of 2-0060 failed with error -12 [ 1212.983595][T31657] usb 6-1: USB disconnect, device number 92 17:41:35 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) mbind(&(0x7f0000a44000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x100, 0x0) 17:41:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x0, 0x0, 'none\x00'}, {@remote, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="5f080f0000000000e3104a605100bf01dd0497be8dcde784bdd14a8eea9fb0bca1b6544241d6f04e3e29a3c67b3f4beec74eca31c41e2277acb1159ffa99bb585d6394629a7e4dc213841530905fab2c06c916d61a46cdca6ea8885f22b741b8b64ea515362c921fa53dcc96f2ed54bd4dcb3cda05d35b89e4a7b762e06b8af7fa32720796ea8d085cca3fb756db667088c7e670e774222e231cca42945cab19bde0af47e1cc04149f522ac45c8553b651a024f89656cce76409372c6d7a2e255191cb9fbece22f65ac2b99098b03529b3a69ddb0e9b67cd44cf01b26c2716f874a46b34af5b577a833ccbf71a26c75c1ae53afd3071a402a7865555f3f125b3612194a0e1af036bf26098e4b6698f111099e8b454ebdb0cde417682780397a5d7efd9ebdc0ad8922737227bc107cb4cbfa768a7d78bd8af5eb8d3296353d93246b5e0"], 0xa) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x2) 17:41:35 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f004000}) read(r1, &(0x7f00000002c0)=""/4096, 0x1000) 17:41:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3c) 17:41:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x28e, 0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) 17:41:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:41:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SCSI_RESET(r0, 0x5386, 0x718000) 17:41:35 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8100000008b0f, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@dev}) 17:41:35 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f004000}) read(r1, &(0x7f00000002c0)=""/4096, 0x1000) 17:41:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x28e, 0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) 17:41:35 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) fallocate(r0, 0x29, 0x0, 0x7) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) 17:41:35 executing program 5: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") setsockopt$inet_int(r1, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) 17:41:35 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000a01ec319256d7604dee4010000001c9245655c", 0x18, 0xfffffffffffffffe) 17:41:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x0, 0x0, 'none\x00'}, {@remote, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x2) 17:41:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:41:36 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$tipc(0x1e, 0x1, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x7ffffffff000}]) 17:41:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:36 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f004000}) read(r1, &(0x7f00000002c0)=""/4096, 0x1000) 17:41:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic}) 17:41:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x1) 17:41:36 executing program 4: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) io_uring_enter(r0, 0x0, 0x2, 0x1, &(0x7f00000001c0), 0x8) 17:41:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:36 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x4, 0x200000022d}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") readv(r0, &(0x7f0000001580)=[{0x0, 0x351}, {&(0x7f0000000280)=""/179, 0x55e7729d}], 0x2) 17:41:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 17:41:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x0, 0x0, 'none\x00'}, {@remote, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x2) 17:41:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:41:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xe, @rand_addr=0x4000000}]}}}]}, 0x38}}, 0x0) 17:41:37 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) [ 1215.208638][ T5094] netlink: 'syz-executor.2': attribute type 14 has an invalid length. 17:41:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:41:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "293b2393ff7046975c0aba64534f3b1e83f9914841f4d7e5b30fc2ee31e2276429b649012c794fcc98485b34c642f5b2dd90d3f97eb979e4ab88ce4568eee4"}, 0x70f000) 17:41:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6c}, [@ldst={0x3fd, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 17:41:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\x00', @ifru_mtu}) 17:41:37 executing program 3: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x1000000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 17:41:38 executing program 4: unshare(0x8000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x3f, 0x0, 0xffffffffffffff9c}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x5) 17:41:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12"], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000380)) 17:41:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') write$P9_RATTACH(r0, &(0x7f0000000440)={0x8, 0x69, 0x2, {0x0, 0x1, 0x3}}, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'teql0\x00', 0x402}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) shutdown(r1, 0xfffffffffffffffd) timerfd_create(0x7, 0x800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb9030006"], 0x13) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 17:41:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 17:41:38 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000001940), 0x0, &(0x7f0000001b80)}, 0x4000000) 17:41:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xfb) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x14}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a03010000000000000000000000000000ffff00000006f68000000000000000000000000000bb00000000000000000000000000000001fe80800000000000000000b800000000aa00000000000000000700000000000000"], 0x58) write(r0, 0x0, 0x0) 17:41:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') write$P9_RATTACH(r0, &(0x7f0000000440)={0x8, 0x69, 0x2, {0x0, 0x1, 0x3}}, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'teql0\x00', 0x402}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) shutdown(r1, 0xfffffffffffffffd) timerfd_create(0x7, 0x800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb9030006"], 0x13) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 17:41:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000b00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2040e}}, 0x20) 17:41:38 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 17:41:38 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000369ddd10341902120887000000010902240001000000000904750002ab08c10009050d1e00f200000009058d020002000000b77393c9af5b6a407d18090ce55172baf12fd6f298a5609936114cebea994a04555e43e9b6744c475b3f1d91861057283f258a0c389f1156c25a469a8301eaafa3c4632a56dc5e059506acae4bf07fe6eecd3c34c75d3e90cff21f58c2855a72a93138a163137cafc3910dd52b68be8752dc0b6e90d15cbddf3142beb90f1a6c6d7184217b2cf80dde6603de36af0a9212e7cb78af6364318a03c90db3b0c8d116df143ba5c0c7b981b8dbfef00db035a6f9b4f4d80d4597ec349a0057d5f959f8c405cc4136186766bdf5a568abdcdceacd81b6a18787cda99989a63b55a03f6c83906f28f6873ac3980e245fef83e2014ab78d690c277a03251b854a"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x5c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 17:41:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a80)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x30, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x24, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x50}}, 0x0) 17:41:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') write$P9_RATTACH(r0, &(0x7f0000000440)={0x8, 0x69, 0x2, {0x0, 0x1, 0x3}}, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'teql0\x00', 0x402}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) shutdown(r1, 0xfffffffffffffffd) timerfd_create(0x7, 0x800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb9030006"], 0x13) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 17:41:38 executing program 4: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file1\x00', 0xfffffffffffffffc) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28}, 0x28) 17:41:38 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 17:41:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') write$P9_RATTACH(r0, &(0x7f0000000440)={0x8, 0x69, 0x2, {0x0, 0x1, 0x3}}, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'teql0\x00', 0x402}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) shutdown(r1, 0xfffffffffffffffd) timerfd_create(0x7, 0x800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb9030006"], 0x13) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 17:41:38 executing program 2: socketpair$unix(0x1, 0x400000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000340)=0x0) close(r0) socket(0x1e, 0x4, 0x0) io_submit(r1, 0x20000000000002f6, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 1216.724742][T31657] usb 6-1: new high-speed USB device number 93 using dummy_hcd 17:41:38 executing program 4: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000a40)="bd", 0x1) tee(r2, r1, 0x3, 0x0) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:41:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x1c, 0x0, 0x0, 0x100000000000000, 0x0, 0x65}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) [ 1216.804476][T31714] usb 1-1: new high-speed USB device number 79 using dummy_hcd 17:41:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x803, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000840), 0x10, 0x0}, 0x0) sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000740)=""/114, 0xbb}, {&(0x7f00000006c0)=""/110, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000300)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x1}], 0x161, &(0x7f0000000600)=""/191, 0xfffffffffffffd3e}}], 0x40000000000049d, 0x0, &(0x7f0000003700)={0x77359400}) [ 1216.982421][T31657] usb 6-1: Using ep0 maxpacket: 16 17:41:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x138, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 1217.083253][T31714] usb 1-1: Using ep0 maxpacket: 16 [ 1217.125587][T31657] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1217.135964][T31657] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=12.b3 [ 1217.146844][T31657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.186684][T31657] usb 6-1: config 0 descriptor?? [ 1217.222546][T31714] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1217.231056][T31714] usb 1-1: config 0 has no interface number 0 [ 1217.237768][T31714] usb 1-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 1217.247028][T31714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.321007][T31714] usb 1-1: config 0 descriptor?? [ 1217.459763][ T17] usb 6-1: USB disconnect, device number 93 [ 1217.752560][T31714] f81534 1-1:0.117: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1217.761950][T31714] f81534 1-1:0.117: f81534_find_config_idx: read failed: -71 [ 1217.769636][T31714] f81534 1-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 1217.777842][T31714] f81534: probe of 1-1:0.117 failed with error -71 [ 1217.789449][T31714] usb 1-1: USB disconnect, device number 79 [ 1218.232240][ T17] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1218.342303][T31714] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1218.472287][ T17] usb 6-1: Using ep0 maxpacket: 16 [ 1218.592450][ T17] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1218.602461][T31714] usb 1-1: Using ep0 maxpacket: 16 [ 1218.603524][ T17] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=12.b3 [ 1218.617678][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.629173][ T17] usb 6-1: config 0 descriptor?? [ 1218.752541][T31714] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1218.761334][T31714] usb 1-1: config 0 has no interface number 0 [ 1218.767831][T31714] usb 1-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 1218.777302][T31714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.787155][T31714] usb 1-1: config 0 descriptor?? [ 1218.874903][ T17] usb 6-1: USB disconnect, device number 94 [ 1219.242367][T31714] f81534 1-1:0.117: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1219.250870][T31714] f81534 1-1:0.117: f81534_find_config_idx: read failed: -71 [ 1219.258512][T31714] f81534 1-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 1219.267208][T31714] f81534: probe of 1-1:0.117 failed with error -71 [ 1219.278778][T31714] usb 1-1: USB disconnect, device number 80 17:41:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xfdaffff6bfffffc3, 0x0) 17:41:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x10, 0x2, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x40}}, 0x0) 17:41:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xffffffffffffff01) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) dup2(r1, r0) 17:41:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200ff8e000000000000005e07f3ff00000000"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x7ff}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") 17:41:41 executing program 1: syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x100000c1004110, &(0x7f00000000c0)="215d2c4b8c1513169088af4362c58fbba6abb838ac72916735c868650907e4b4ab28e1f570ff07cbda7530ff3d305db1010400000000000001") 17:41:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x541b, 0x2070e000) 17:41:41 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x5, 0xfffffffd, 0x52, 0xffff}}) ioprio_set$pid(0x1, r2, 0xd81) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x87ff7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pidfd_send_signal(r4, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xe2ee}}, 0x0, 0x1, 0x0, "989df493c69d502cddc7e3cc65253f03ac5954e3d0613817fcaa8308c4649deaa29733497e90c14661e43216ab7f865a6f05f8470fedaba2b3e62e38a2a3c099b8d2ca8498ef6705f060d497f3ce55fc"}, 0xd8) [ 1219.576633][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:41:41 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x98) 17:41:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x2, 0x0, &(0x7f0000000040), 0x0) 17:41:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 17:41:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0x0, 0xfffffffd}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x2000000000800020, 0x0, 0x0, 0x4cb], 0x0, 0x340a90}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:42 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000000000008"], 0x19) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:41:42 executing program 1: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @empty=[0xf000, 0xe000000000000000, 0x800e0000, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0xb, 0x0, [@empty=0x3a, @broadcast]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @generic={0x0, 0x7, "bbcbf993b5"}, @rr={0x7, 0x13, 0x0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @local]}, @generic={0x0, 0xc, "84b773c3b31465b25163"}]}}}}}}}, 0x0) [ 1220.132608][ T5272] kvm: pic: non byte write 17:41:42 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x5, 0xfffffffd, 0x52, 0xffff}}) ioprio_set$pid(0x1, r2, 0xd81) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x87ff7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pidfd_send_signal(r4, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xe2ee}}, 0x0, 0x1, 0x0, "989df493c69d502cddc7e3cc65253f03ac5954e3d0613817fcaa8308c4649deaa29733497e90c14661e43216ab7f865a6f05f8470fedaba2b3e62e38a2a3c099b8d2ca8498ef6705f060d497f3ce55fc"}, 0xd8) [ 1220.153864][ T5272] kvm: pic: non byte read [ 1220.181770][ T5272] kvm: pic: non byte write 17:41:42 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x4) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@dstopts={{0x18}}], 0xf}}], 0x1, 0x0) [ 1220.204893][ T5272] kvm: pic: single mode not supported [ 1220.205066][ T5272] kvm: pic: level sensitive irq not supported [ 1220.221525][ T5272] kvm: pic: non byte read 17:41:42 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 1220.260277][ T5272] kvm: pic: non byte write [ 1220.275478][ T5272] kvm: pic: non byte read 17:41:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) [ 1220.301780][ T5272] kvm: pic: non byte write [ 1220.324735][ T5272] kvm: pic: single mode not supported [ 1220.324913][ T5272] kvm: pic: single mode not supported [ 1220.330465][ T5272] kvm: pic: level sensitive irq not supported [ 1220.380679][ T5272] kvm: pic: non byte read [ 1220.413333][ T5272] kvm: pic: non byte write [ 1220.432407][ T5272] kvm: pic: level sensitive irq not supported [ 1220.435766][ T5272] kvm: pic: non byte read [ 1220.497610][ T5272] kvm: pic: non byte write [ 1220.506368][ T5272] kvm: pic: level sensitive irq not supported [ 1220.506705][ T5272] kvm: pic: non byte read 17:41:42 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1220.540001][ T5272] kvm: pic: non byte write 17:41:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000440)=0x18) [ 1220.580526][ T5272] kvm: pic: level sensitive irq not supported [ 1220.580978][ T5272] kvm: pic: non byte read [ 1220.653651][ T5272] kvm: pic: non byte write [ 1220.658821][ T5272] kvm: pic: level sensitive irq not supported [ 1220.659095][ T5272] kvm: pic: non byte read [ 1220.706875][ T5299] sctp: [Deprecated]: syz-executor.4 (pid 5299) Use of int in max_burst socket option. [ 1220.706875][ T5299] Use struct sctp_assoc_value instead 17:41:42 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x0, 0x0, 0x3015, 0x2}}) [ 1220.807023][ T5272] kvm: pic: non byte write 17:41:43 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 1220.943075][ T5272] kvm: pic: level sensitive irq not supported [ 1220.943363][ T5272] kvm: pic: non byte read 17:41:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xfffffffffffffffe) 17:41:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') 17:41:43 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x5, 0xfffffffd, 0x52, 0xffff}}) ioprio_set$pid(0x1, r2, 0xd81) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x87ff7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pidfd_send_signal(r4, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xe2ee}}, 0x0, 0x1, 0x0, "989df493c69d502cddc7e3cc65253f03ac5954e3d0613817fcaa8308c4649deaa29733497e90c14661e43216ab7f865a6f05f8470fedaba2b3e62e38a2a3c099b8d2ca8498ef6705f060d497f3ce55fc"}, 0xd8) 17:41:43 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 17:41:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = epoll_create1(0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c85000)={0x1ffd}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:41:43 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 17:41:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f00000076c0)=ANY=[], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000140)={{0x7fff}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000001c0)) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x63c}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000002000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @mcast2, 0x200}, @in6={0xa, 0x4e24, 0x7, @remote, 0x7ff}, @in={0x2, 0x4e24, @rand_addr=0x7}]}, &(0x7f00000003c0)=0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 17:41:43 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 17:41:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 17:41:43 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 17:41:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x151, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) syz_open_procfs(0x0, &(0x7f0000272000)) 17:41:43 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 17:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000380)="f00fc74f94ba4000b87700ef83d0bb263e050c00bad00466b86b00000066ef0f005c8e0fe82d66b98b0800000f320f013fbad10466b80000000066ef", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24a2e72a", @ANYRES16=0x0, @ANYBLOB="00000000000000000000040000000800020004000000040003"], 0x3}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000180000003b000100ffff0000000000000000b5060800d5f2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1222.246052][ T5382] netlink: 103 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1222.355974][ T5383] netlink: 103 bytes leftover after parsing attributes in process `syz-executor.0'. 17:41:44 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x5, 0xfffffffd, 0x52, 0xffff}}) ioprio_set$pid(0x1, r2, 0xd81) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x87ff7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pidfd_send_signal(r4, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xe2ee}}, 0x0, 0x1, 0x0, "989df493c69d502cddc7e3cc65253f03ac5954e3d0613817fcaa8308c4649deaa29733497e90c14661e43216ab7f865a6f05f8470fedaba2b3e62e38a2a3c099b8d2ca8498ef6705f060d497f3ce55fc"}, 0xd8) 17:41:44 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$team(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 17:41:44 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000440)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x42000024) 17:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x2, 0x2, r2}) 17:41:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f00000076c0)=ANY=[], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000140)={{0x7fff}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000001c0)) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x63c}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000002000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @mcast2, 0x200}, @in6={0xa, 0x4e24, 0x7, @remote, 0x7ff}, @in={0x2, 0x4e24, @rand_addr=0x7}]}, &(0x7f00000003c0)=0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 17:41:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 17:41:46 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000001080)=""/246) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x240002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xfffffffffffff801) r4 = socket(0x9, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'lo\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r5, r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pselect6(0x137, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 17:41:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_PRIORITY={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 17:41:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 17:41:46 executing program 5: r0 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) [ 1224.425036][ T5416] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 17:41:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') write$binfmt_aout(r0, &(0x7f0000000240)={{}, "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", [[], [], [], [], [], [], [], [], []]}, 0x1000) 17:41:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x8, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 17:41:46 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000001080)=""/246) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x240002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xfffffffffffff801) r4 = socket(0x9, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'lo\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r5, r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pselect6(0x137, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 17:41:46 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x2, @dev, @empty=0xac141400, @random="dae70cf8efa7", @loopback}}}}, 0x0) 17:41:46 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623690f00080004000c0816000b770000a3c728f1c46b7b31afdc1338d544", 0x38}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001e00097c"], 0x1}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:41:47 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe00f6ff3b0800240042ef420000000109021b000176000000090400000102099d00070581070001000000bf52cf6794a9d3"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 1225.250048][ T5448] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1225.442627][ T17] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1225.684887][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 1225.812416][ T17] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.823220][ T17] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.834704][ T17] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1225.844289][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.898921][ T17] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1226.095936][T31714] usb 4-1: USB disconnect, device number 66 17:41:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000001080)=""/246) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x240002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xfffffffffffff801) r4 = socket(0x9, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'lo\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r5, r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pselect6(0x137, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 17:41:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f00000076c0)=ANY=[], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000140)={{0x7fff}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000001c0)) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x63c}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000002000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @mcast2, 0x200}, @in6={0xa, 0x4e24, 0x7, @remote, 0x7ff}, @in={0x2, 0x4e24, @rand_addr=0x7}]}, &(0x7f00000003c0)=0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 17:41:48 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") listen(r0, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 17:41:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$unix(0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 17:41:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0) 17:41:48 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005c2000/0x2000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 17:41:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000001080)=""/246) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x240002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xfffffffffffff801) r4 = socket(0x9, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'lo\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r5, r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pselect6(0x137, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 17:41:48 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="9f"}) [ 1226.732840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.739430][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.747819][T31714] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1226.874830][ T5482] binder: 5479:5482 ioctl c0306201 20000040 returned -11 17:41:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) [ 1227.032715][T31714] usb 4-1: Using ep0 maxpacket: 8 [ 1227.205600][T31714] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.216345][T31714] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.230059][T31714] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1227.241354][T31714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1227.443033][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.450368][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.458781][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.465938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.473015][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.479552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.486402][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.492805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.527400][T31714] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device 17:41:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 17:41:51 executing program 4: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") rt_sigqueueinfo(r0, 0x1c, &(0x7f0000035000)={0x0, 0x0, 0x3}) 17:41:51 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') socket$kcm(0x29, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @mcast2, 0x200}, @in6={0xa, 0x4e24, 0x7, @remote, 0x7ff}, @in={0x2, 0x4e24, @rand_addr=0x7}]}, &(0x7f00000003c0)=0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 1229.495379][T31714] usb 4-1: USB disconnect, device number 67 17:41:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x80, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80c39, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 17:41:51 executing program 0: io_setup(0x2, &(0x7f00000004c0)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:41:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 17:41:52 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) [ 1230.033145][T31714] usb 4-1: new high-speed USB device number 68 using dummy_hcd 17:41:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000007c0)=@newsa={0xfc, 0x10, 0x801, 0x0, 0x0, {{@in, @in=@broadcast}, {@in, 0x0, 0x2b}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) 17:41:52 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) 17:41:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)="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") [ 1230.272463][T31714] usb 4-1: Using ep0 maxpacket: 8 17:41:52 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) [ 1230.392834][T31714] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.403597][T31714] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.414970][T31714] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1230.424257][T31714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:52 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 1230.490547][T21719] usb 2-1: new high-speed USB device number 82 using dummy_hcd 17:41:52 executing program 0: write$9p(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x10000000080002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602007a00fde80001084000040d0005000005000000060000ff", 0x29}], 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x49249249249255c, 0x0) [ 1230.680107][T31714] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1230.748498][ T5561] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1230.764510][T21719] usb 2-1: Using ep0 maxpacket: 8 [ 1230.901354][ T17] usb 4-1: USB disconnect, device number 68 [ 1230.911926][T21719] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.920401][T21719] usb 2-1: config 0 has no interface number 0 [ 1230.927324][T21719] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1230.937934][T21719] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1230.951048][T21719] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1230.965548][T21719] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1230.975709][T21719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.160706][T21719] usb 2-1: config 0 descriptor?? [ 1231.312452][ T5565] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1231.416277][T21719] usb 2-1: USB disconnect, device number 82 [ 1231.523122][ T17] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1231.764157][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 1231.893648][ T17] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.904415][ T17] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.917304][ T17] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1231.926852][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.991342][ T17] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1232.242325][T21719] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1232.482220][T21719] usb 2-1: Using ep0 maxpacket: 8 [ 1232.602520][T21719] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1232.612441][T21719] usb 2-1: config 0 has no interface number 0 [ 1232.618616][T21719] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1232.629360][T21719] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1232.640558][T21719] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1232.653738][T21719] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1232.663047][T21719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.683167][T21719] usb 2-1: config 0 descriptor?? [ 1232.926181][T31714] usb 2-1: USB disconnect, device number 83 17:41:56 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe00f6ff3b0800240042ef420000000109021b000176000000090400000102099d00070581070001000000bf52cf6794a9d3"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 17:41:56 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x400) r2 = dup2(r0, r1) ioctl$UI_GET_VERSION(r2, 0x8004552d, 0x0) 17:41:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 17:41:56 executing program 5: syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x2, 0x0, 0x0, 0x0, 0x2, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev={0xac, 0x10}, {[@ra={0x94, 0x6}, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {[@loopback]}, {[@loopback]}]}]}}}}}}}, 0x0) 17:41:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 17:41:56 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) [ 1233.959874][T21719] usb 4-1: USB disconnect, device number 69 17:41:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91d92591d0", 0xc2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:41:56 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00f6200000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:41:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000118ffc), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) close(r2) [ 1234.323798][ T17] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1234.452186][T21719] usb 4-1: new high-speed USB device number 70 using dummy_hcd 17:41:56 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) [ 1234.597817][ T17] usb 2-1: Using ep0 maxpacket: 8 17:41:56 executing program 4: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 1234.624370][ T3671] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1234.725440][T21719] usb 4-1: Using ep0 maxpacket: 8 [ 1234.742758][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1234.751145][ T17] usb 2-1: config 0 has no interface number 0 [ 1234.757760][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1234.768612][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1234.779806][ T17] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1234.792926][ T17] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1234.802197][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.813875][ T17] usb 2-1: config 0 descriptor?? 17:41:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1234.894903][T21719] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.905687][T21719] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.912733][T31714] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1234.917202][T21719] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1234.933789][T21719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.972472][ T3671] usb 6-1: Using ep0 maxpacket: 8 [ 1235.086857][T21719] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1235.095989][ T3671] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 1235.104445][ T3671] usb 6-1: config 0 has no interface number 0 [ 1235.111751][ T3671] usb 6-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 1235.123144][ T3671] usb 6-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1235.134579][ T3671] usb 6-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 1235.146231][ T3671] usb 6-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1235.157795][ T3671] usb 6-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 1235.171639][ T3671] usb 6-1: config 0 interface 164 has no altsetting 0 [ 1235.183170][T31714] usb 1-1: Using ep0 maxpacket: 8 [ 1235.189226][ T17] usb 2-1: USB disconnect, device number 84 [ 1235.296272][ T3671] usb 6-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 1235.305596][ T3671] usb 6-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 1235.312736][T31714] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1235.315235][ T3671] usb 6-1: Product: syz [ 1235.323143][T31714] usb 1-1: config 0 has no interface number 0 [ 1235.332624][ T3671] usb 6-1: config 0 descriptor?? [ 1235.333894][T31714] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1235.345092][T31714] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=f3.7e [ 1235.354286][T31714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.357159][T31714] usb 1-1: config 0 descriptor?? [ 1235.370009][T21719] usb 4-1: USB disconnect, device number 70 [ 1235.512394][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 1235.534030][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.553094][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.572446][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.596514][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.613297][T31714] ttusb_init_controller: error [ 1235.618169][T31714] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1235.645993][T31714] tda10046: chip is not answering. Giving up. [ 1235.652794][T31714] dvb-ttusb-budget: A frontend driver was not found for device [0b48:1005] [ 1235.681392][T31714] usb 1-1: USB disconnect, device number 82 [ 1235.794417][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 1235.800942][ T3671] input input170: Device does not respond to id packet M [ 1235.823019][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.829628][ T3671] input input170: Device does not respond to id packet P [ 1235.852819][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.859170][ T3671] input input170: Device does not respond to id packet B [ 1235.884316][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.890760][ T3671] input input170: Device does not respond to id packet N [ 1235.912716][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.933104][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.952716][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.972653][T21719] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1235.980851][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 1235.988839][ T3671] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.164/input/input170 [ 1236.209480][ T3671] usb 6-1: USB disconnect, device number 95 [ 1236.216855][T21719] usb 4-1: Using ep0 maxpacket: 8 [ 1236.342432][T21719] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.353028][T21719] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.364353][T21719] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1236.373560][T21719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.382645][T31714] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1236.427746][T21719] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1236.622168][T31714] usb 1-1: Using ep0 maxpacket: 8 [ 1236.742500][T31714] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1236.750708][T31714] usb 1-1: config 0 has no interface number 0 [ 1236.757377][T31714] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1236.764430][T31714] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=f3.7e [ 1236.773639][T31714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.778546][T31714] usb 1-1: config 0 descriptor?? [ 1237.042673][T31714] ttusb_init_controller: error [ 1237.047576][T31714] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1237.062406][ T3671] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1237.079611][T31714] tda10046: chip is not answering. Giving up. [ 1237.085931][T31714] dvb-ttusb-budget: A frontend driver was not found for device [0b48:1005] [ 1237.100898][T31714] usb 1-1: USB disconnect, device number 83 [ 1237.322345][ T3671] usb 6-1: Using ep0 maxpacket: 8 [ 1237.442426][ T3671] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 1237.450741][ T3671] usb 6-1: config 0 has no interface number 0 [ 1237.457047][ T3671] usb 6-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 1237.468394][ T3671] usb 6-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.479792][ T3671] usb 6-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 1237.491420][ T3671] usb 6-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1237.502851][ T3671] usb 6-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 1237.516292][ T3671] usb 6-1: config 0 interface 164 has no altsetting 0 [ 1237.604120][ T3671] usb 6-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 1237.613415][ T3671] usb 6-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 1237.621726][ T3671] usb 6-1: Product: syz [ 1237.628103][ T3671] usb 6-1: config 0 descriptor?? [ 1237.812454][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 1237.834830][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.854652][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.872525][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.892454][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.912628][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.932444][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.952377][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.972480][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1237.993407][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.012603][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.032365][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.052544][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.072489][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.092266][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.112311][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.132362][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.152421][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.172659][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.192401][ T3671] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 1238.198834][ T3671] input input171: Timeout waiting for response from device. [ 1238.210111][ T3671] usb 6-1: USB disconnect, device number 96 17:42:00 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe00f6ff3b0800240042ef420000000109021b000176000000090400000102099d00070581070001000000bf52cf6794a9d3"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 17:42:00 executing program 4: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 17:42:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 17:42:00 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) 17:42:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x90) r4 = dup2(r1, r3) r5 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) dup3(r4, r2, 0x0) 17:42:00 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1238.396857][T21719] usb 4-1: USB disconnect, device number 71 17:42:00 executing program 4: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 17:42:00 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fa) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 1238.754096][ T3671] usb 2-1: new high-speed USB device number 85 using dummy_hcd 17:42:01 executing program 4: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 1238.915502][T21719] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1238.992601][ T3671] usb 2-1: Using ep0 maxpacket: 8 [ 1239.112916][ T3671] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.121298][ T3671] usb 2-1: config 0 has no interface number 0 [ 1239.127740][ T3671] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1239.138205][ T3671] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1239.149402][ T3671] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1239.162698][ T3671] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1239.171883][ T3671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.184375][ T3671] usb 2-1: config 0 descriptor?? [ 1239.222733][T21719] usb 4-1: Using ep0 maxpacket: 8 17:42:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:42:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000e80)=""/5, 0x5}], 0x6}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) [ 1239.342736][T21719] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.353368][T21719] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.364736][T21719] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1239.373998][T21719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:42:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1239.540561][ T3671] usb 2-1: USB disconnect, device number 85 [ 1239.627224][T21719] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1239.830893][T21719] usb 4-1: USB disconnect, device number 72 [ 1240.422279][T21719] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1240.662317][T21719] usb 4-1: Using ep0 maxpacket: 8 [ 1240.782566][T21719] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.793197][T21719] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.804483][T21719] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1240.813839][T21719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.870170][T21719] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 1241.374111][ T0] NOHZ: local_softirq_pending 08 17:42:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 17:42:04 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:42:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x568, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='.+lgboup/\x1a\x85\xdc\xb0|\x03>@\x7f\x85\xe6\xfb\'\xc5\x96', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) r1 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @link_local, 'batadv0\x00'}}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'tunl0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usag\xe3\xd3Pm\th\xa2e_perc', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000000c0)}}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) accept$alg(r6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000007ac0)}}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) accept$alg(r7, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000140)) gettid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2b, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, 0x0) 17:42:04 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) [ 1242.834780][T21719] usb 4-1: USB disconnect, device number 73 17:42:04 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x02\x00\xfb\xdf\xe6\xdb\xcf\x941~\x9eN\x03\xb2\xfa\xe7\xd3\xdb\xb5\xe2N\xd2<\x8b\xd8\xb9d\x95\x7f)\x1f\xfd#\x02l0/\xf4\xe3[5\xa0h') r1 = syz_open_procfs(0x0, &(0x7f0000001580)='clear_refs\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, &(0x7f0000000000), 0x0) 17:42:04 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045731, 0xfffffffffffffffe) 17:42:05 executing program 4: unshare(0x8000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) bind$netlink(r1, 0x0, 0x0) 17:42:05 executing program 2: unshare(0x2000400) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2c0102, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 17:42:05 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045731, 0xfffffffffffffffe) [ 1243.192222][T31714] usb 2-1: new high-speed USB device number 86 using dummy_hcd 17:42:05 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045731, 0xfffffffffffffffe) 17:42:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:42:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, 0x0) 17:42:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000002c0007041dfffd946f610500070000001d00000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1243.452909][T31714] usb 2-1: Using ep0 maxpacket: 8 [ 1243.545789][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1243.572753][T31714] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1243.581044][T31714] usb 2-1: config 0 has no interface number 0 [ 1243.587622][T31714] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1243.597507][T31714] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1243.608567][T31714] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1243.621797][T31714] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1243.631016][T31714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.693210][T31714] usb 2-1: config 0 descriptor?? 17:42:06 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:42:06 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045731, 0xfffffffffffffffe) [ 1243.968240][T31714] usb 2-1: USB disconnect, device number 86 17:42:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 17:42:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 17:42:06 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 17:42:06 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x20a1562f) 17:42:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:42:06 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0) 17:42:06 executing program 4: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) 17:42:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000280)={{0x4000001ff, 0xb}}) 17:42:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) 17:42:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000017010000020000003e00000000000000"], 0x18}, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18}], 0x18}], 0x1b5, 0x0) 17:42:07 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:42:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/29, 0x1d) getdents64(r1, &(0x7f0000000340)=""/127, 0x43) lseek(r1, 0xfffffffffffffffe, 0x1) getdents(r1, &(0x7f0000000140)=""/23, 0x236) 17:42:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="7000000024000104e300000000000063895bea1a", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff00000000280008001c0001000000000000fffffff00000000000000000000000020000000800020000000200060005000000000014000100706669666f5f686561645f64726f70000600020000000000"], 0x70}}, 0x0) 17:42:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendto$inet6(r0, &(0x7f00000001c0)=';', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 17:42:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000280)={{0x4000001ff, 0xb}}) 17:42:07 executing program 1: r0 = socket(0x2000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@nfc_llcp={0x27, 0x8, 0x0, 0x0, 0x0, 0x0, "3dc130c5be353b0da5e30a2ae2a66abc5b54171b3f5006fd9f34c66eeecc136c3898fbac90552ca5df96f023f75e9fb8203967e79cb686aef8b5e0ed1f3d5c"}, 0x80, 0x0}}], 0x1, 0x0) 17:42:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, 0xe8) 17:42:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000280)={{0x4000001ff, 0xb}}) 17:42:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000002c0)={0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="e7"}) 17:42:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x7b, 0x0, [0x480000000000561], [0xc1]}) 17:42:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008b33ea08eb0302002d4a0000000109021b0001000000000904ba000172775500070501000000000000"], 0x0) 17:42:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000280)={{0x4000001ff, 0xb}}) [ 1245.942323][T21719] usb 1-1: new high-speed USB device number 84 using dummy_hcd 17:42:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendto$inet6(r0, &(0x7f00000001c0)=';', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 17:42:08 executing program 3: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000000)) 17:42:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r1, 0x0, 0x1, 'l'}, 0x9) 17:42:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1}}}, 0x88) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000200)) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) [ 1246.182326][T21719] usb 1-1: Using ep0 maxpacket: 8 17:42:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) 17:42:08 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)=ANY=[@ANYBLOB="14000000690009eeffffc7ffffffff0000000000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:42:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') [ 1246.302468][T21719] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1246.310922][T21719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.321434][T21719] usb 1-1: config 0 has no interface number 0 [ 1246.327799][T21719] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1246.336986][T21719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.435561][T21719] usb 1-1: config 0 descriptor?? 17:42:08 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) [ 1246.476795][T21719] igorplugusb 1-1:0.186: endpoint incorrect 17:42:08 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xffffffffffffffd9}) 17:42:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000828000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "9645e89650196a1a", "45b6e022dbf1fb07ff029bb594c2dcd09a59ebdbe2da06595dfd2797fa4d91bc", "b2d2c111", "b2134e61152bd8a8"}, 0x38) sendto$inet6(r1, &(0x7f00000000c0)="8e", 0x1, 0x8000, 0x0, 0x24b) sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000080)="b4", 0xb2, 0x0, 0x0, 0x2f3) [ 1246.675780][T21719] usb 1-1: USB disconnect, device number 84 [ 1247.462366][T31714] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1247.712216][T31714] usb 1-1: Using ep0 maxpacket: 8 [ 1247.842767][T31714] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1247.851089][T31714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.861522][T31714] usb 1-1: config 0 has no interface number 0 [ 1247.867777][T31714] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1247.876974][T31714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.886658][T31714] usb 1-1: config 0 descriptor?? [ 1247.936871][T31714] igorplugusb 1-1:0.186: endpoint incorrect [ 1248.134168][T31714] usb 1-1: USB disconnect, device number 85 17:42:10 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x7) 17:42:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xffffffffffffffd9}) 17:42:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 17:42:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) 17:42:10 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0045520, 0x71ff00) 17:42:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendto$inet6(r0, &(0x7f00000001c0)=';', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 17:42:10 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x200400, 0x0) syncfs(r0) 17:42:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f00000000c0)) 17:42:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, ')\r'}, @global=@item_4={0x3, 0x1, 0xa, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "06c46f00"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 17:42:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xffffffffffffffd9}) 17:42:10 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000002840)={&(0x7f0000000100), 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 17:42:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 17:42:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xffffffffffffffd9}) 17:42:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="11") mmap(&(0x7f000003c000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 17:42:11 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000002840)={&(0x7f0000000100), 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) [ 1249.275162][T21719] usb 2-1: new high-speed USB device number 87 using dummy_hcd 17:42:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast=[0xff, 0xea], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) 17:42:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1249.449719][ T5942] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1249.496844][ T5945] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1249.524089][T21719] usb 2-1: Using ep0 maxpacket: 16 17:42:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendto$inet6(r0, &(0x7f00000001c0)=';', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 17:42:11 executing program 3: unshare(0x20040600) fanotify_mark(0xffffffffffffffff, 0x15, 0x20, 0xffffffffffffffff, 0x0) 17:42:11 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000002840)={&(0x7f0000000100), 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) [ 1249.642733][T21719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.654370][T21719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1249.668344][T21719] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1249.677645][T21719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.772209][T21719] usb 2-1: config 0 descriptor?? [ 1250.112503][T21719] usbhid 2-1:0.0: can't add hid device: -71 [ 1250.118789][T21719] usbhid: probe of 2-1:0.0 failed with error -71 [ 1250.128514][T21719] usb 2-1: USB disconnect, device number 87 [ 1250.592418][T21719] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1250.832203][T21719] usb 2-1: Using ep0 maxpacket: 16 [ 1250.952459][T21719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.963588][T21719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1250.976634][T21719] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1250.985844][T21719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.995550][T21719] usb 2-1: config 0 descriptor?? [ 1251.501945][T21719] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0049/input/input172 [ 1251.584921][T21719] microsoft 0003:045E:07DA.0049: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1251.675793][T21719] usb 2-1: USB disconnect, device number 88 [ 1252.452253][T21719] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1252.692256][T21719] usb 2-1: Using ep0 maxpacket: 16 [ 1252.812481][T21719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.823697][T21719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1252.836697][T21719] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1252.845873][T21719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.855464][T21719] usb 2-1: config 0 descriptor?? 17:42:15 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @random="00000000c4df", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}, @icmp=@timestamp}}}}, 0x0) 17:42:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1253.192578][T21719] usbhid 2-1:0.0: can't add hid device: -71 [ 1253.198820][T21719] usbhid: probe of 2-1:0.0 failed with error -71 [ 1253.210721][T21719] usb 2-1: USB disconnect, device number 89 17:42:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 17:42:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={r3}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x24) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100)=0x93947935485a4370, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x5) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setitimer(0x4bff7e6a649db555, &(0x7f0000000080)={{}, {0x0, 0x2710}}, &(0x7f00000001c0)) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 17:42:15 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000002840)={&(0x7f0000000100), 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 17:42:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchownat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x800) [ 1253.298024][ T5979] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 17:42:15 executing program 4: mq_open(&(0x7f00000004c0)='$keyring{wlan1^keyringbdev\x9f\x00', 0x40, 0x0, &(0x7f0000000500)={0x4, 0x5, 0xfffffffffffffff8, 0x2, 0x2, 0x3, 0x7, 0x4}) 17:42:15 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e7bee310e10508044653000000010902120001000000000904ad010000001a00"], 0x0) 17:42:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000000300)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x5c}}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:42:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 17:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x32, 0x829, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1253.566739][ T5995] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 17:42:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 17:42:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1d, 0x0, 0x3f00}}, 0x50) 17:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x32, 0x829, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) 17:42:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 1253.799682][ T6005] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1253.809028][T21719] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1254.052318][T21719] usb 2-1: Using ep0 maxpacket: 16 17:42:16 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={r3}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x24) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100)=0x93947935485a4370, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x5) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setitimer(0x4bff7e6a649db555, &(0x7f0000000080)={{}, {0x0, 0x2710}}, &(0x7f00000001c0)) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 17:42:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x32, 0x829, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) 17:42:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_buf(r0, 0x84, 0x75, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) 17:42:16 executing program 4: unshare(0x2000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x2c0401, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') [ 1254.172435][T21719] usb 2-1: config 0 has an invalid interface number: 173 but max is 0 [ 1254.180758][T21719] usb 2-1: config 0 has no interface number 0 [ 1254.187558][T21719] usb 2-1: config 0 interface 173 has no altsetting 0 [ 1254.194616][T21719] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=53.46 [ 1254.203834][T21719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.341975][T21719] usb 2-1: config 0 descriptor?? [ 1254.396668][T21719] usb 2-1: no audio or video endpoints found [ 1254.585523][ T3671] usb 2-1: USB disconnect, device number 90 [ 1255.352189][ T3671] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1255.592263][ T3671] usb 2-1: Using ep0 maxpacket: 16 [ 1255.712446][ T3671] usb 2-1: config 0 has an invalid interface number: 173 but max is 0 [ 1255.720802][ T3671] usb 2-1: config 0 has no interface number 0 [ 1255.727186][ T3671] usb 2-1: config 0 interface 173 has no altsetting 0 [ 1255.734150][ T3671] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=53.46 [ 1255.743413][ T3671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.753190][ T3671] usb 2-1: config 0 descriptor?? [ 1255.797595][ T3671] usb 2-1: no audio or video endpoints found [ 1255.995591][ T3671] usb 2-1: USB disconnect, device number 91 17:42:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:42:18 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) 17:42:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 17:42:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3cb}, {0x0, 0xffffffffffffff06}, {0x0}, {&(0x7f0000000600)="6653070000003639405cb4aed14e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd45dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775487b2b2f710c2b03b5b2461179f5f90bba001b50c09a6218a8106df2858ec973328e5a2c078a3fe3b52020203517e65ee74e82ba80a0fa881e689f7615baf78f0859fc000060d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fcf567bf50600a2434362f56de8c859fa668b046005fc1e41eccbab4c0e594193f4e4e", 0xa1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x32, 0x829, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) 17:42:18 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={r3}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x24) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100)=0x93947935485a4370, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x5) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setitimer(0x4bff7e6a649db555, &(0x7f0000000080)={{}, {0x0, 0x2710}}, &(0x7f00000001c0)) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) [ 1256.676175][ T6060] kvm_hv_set_msr: 110 callbacks suppressed [ 1256.676224][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007a data 0x4d00000000f 17:42:18 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9f"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) 17:42:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x4, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) [ 1256.765418][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000053 data 0x4d00000000f [ 1256.815599][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000077 data 0x4d00000000f [ 1256.877630][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000040 data 0x4d00000000f 17:42:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) [ 1256.924074][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000077 data 0x4d00000000f 17:42:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 1256.997741][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000040 data 0x4d00000000f [ 1257.036748][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000077 data 0x4d00000000f 17:42:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 1257.055567][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000040 data 0x4d00000000f [ 1257.075999][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0x4d00000000f [ 1257.101260][ T6060] kvm [6047]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000061 data 0x4d00000000f 17:42:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003}, 0x334, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000729d50014750000000007000000", @ANYRES32=r2, @ANYBLOB="0a0f07000a000200aaaaaaaaaa0c000001000000"], 0x42e}}, 0x0) [ 1257.354439][ T6089] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.366759][ T6089] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1257.378946][ T6089] bridge_slave_0: FDB only supports static addresses 17:42:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:42:19 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={r3}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x24) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100)=0x93947935485a4370, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x5) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setitimer(0x4bff7e6a649db555, &(0x7f0000000080)={{}, {0x0, 0x2710}}, &(0x7f00000001c0)) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 17:42:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 1257.496612][ T6092] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.508876][ T6092] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1257.521009][ T6092] bridge_slave_0: FDB only supports static addresses 17:42:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3cb}, {0x0, 0xffffffffffffff06}, {0x0}, {&(0x7f0000000600)="6653070000003639405cb4aed14e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd45dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775487b2b2f710c2b03b5b2461179f5f90bba001b50c09a6218a8106df2858ec973328e5a2c078a3fe3b52020203517e65ee74e82ba80a0fa881e689f7615baf78f0859fc000060d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fcf567bf50600a2434362f56de8c859fa668b046005fc1e41eccbab4c0e594193f4e4e", 0xa1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:42:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfcae) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 17:42:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x100, 0x3, {0x0, 0x0, 0x100, 0x7c}}) 17:42:21 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1000000000000146) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff40) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 17:42:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:42:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd4, 0x0, &(0x7f0000000080)) 17:42:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x16}]}) 17:42:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x2}) 17:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}}, 0x0) 17:42:21 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x600) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) 17:42:22 executing program 0: r0 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x801}, {&(0x7f00000002c0)="b7", 0x1}], 0x2, 0x0) 17:42:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1261.843833][ T0] NOHZ: local_softirq_pending 08 17:42:24 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001300), &(0x7f0000000100)=0x60) 17:42:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) syz_emit_ethernet(0x352, &(0x7f00003f3fd5)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0000001, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 17:42:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 17:42:24 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendto(r0, &(0x7f0000000080)="f5", 0x1, 0x0, &(0x7f0000000100)=@generic={0xa, "6a64c974246412fdb7e4937f9442856bb59c929ee4a4d8ed023d4fb8c157aefef87528417a5dbb266c1215687e3a3e7cac9293f2c6dffd1fb0bc81692c0a16348217ea1350bab263aea5aec5295a7daf06e02021d0ce17fa039ec38c86840a6dabc8024e80511492c3c476ff0173c6ec799414bcb3331ed847386283e44a"}, 0x80) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20}, 0xb) r1 = io_uring_setup(0x40000000e, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) dup3(r1, r0, 0x0) 17:42:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3cb}, {0x0, 0xffffffffffffff06}, {0x0}, {&(0x7f0000000600)="6653070000003639405cb4aed14e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd45dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775487b2b2f710c2b03b5b2461179f5f90bba001b50c09a6218a8106df2858ec973328e5a2c078a3fe3b52020203517e65ee74e82ba80a0fa881e689f7615baf78f0859fc000060d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fcf567bf50600a2434362f56de8c859fa668b046005fc1e41eccbab4c0e594193f4e4e", 0xa1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:42:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000280004002a7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB='C'], 0x3}}, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 17:42:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:42:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) write$FUSE_DIRENT(r1, &(0x7f0000001240)={0x10, 0x8000a0ffffffff, 0x2}, 0x10) 17:42:24 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/177, 0xb1) 17:42:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) fsync(r1) 17:42:24 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe) 17:42:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002580)={0x1, 0x0, [{0x1db}]}) [ 1263.173086][ T3671] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1263.412419][ T3671] usb 1-1: Using ep0 maxpacket: 8 [ 1263.533832][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.545714][ T3671] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1263.558870][ T3671] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1263.568151][ T3671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.578421][ T3671] usb 1-1: config 0 descriptor?? [ 1264.065315][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.073107][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.080659][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.088442][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.095875][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.103320][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.110864][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.118336][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.125778][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.133482][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.140761][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.148170][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.156052][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.163850][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.171259][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.180780][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.188314][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.195755][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.203544][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.211598][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.219021][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.226469][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.234000][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.241416][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.249008][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.256417][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.264058][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.271375][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.278831][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.286871][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.294252][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.301514][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.309642][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.317120][ T3671] logitech 0003:046D:C295.004A: unknown main item tag 0x0 [ 1264.326211][ T3671] logitech 0003:046D:C295.004A: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 1264.337766][ T3671] logitech 0003:046D:C295.004A: not enough fields in HID_OUTPUT_REPORT 0 [ 1264.348392][ T3671] logitech: probe of 0003:046D:C295.004A failed with error -1 [ 1264.359118][ T3671] usb 1-1: USB disconnect, device number 86 [ 1265.052381][T31657] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1265.302292][T31657] usb 1-1: Using ep0 maxpacket: 8 [ 1265.442974][T31657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.454087][T31657] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1265.467635][T31657] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1265.477275][T31657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.486914][T31657] usb 1-1: config 0 descriptor?? 17:42:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3cb}, {0x0, 0xffffffffffffff06}, {0x0}, {&(0x7f0000000600)="6653070000003639405cb4aed14e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd45dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775487b2b2f710c2b03b5b2461179f5f90bba001b50c09a6218a8106df2858ec973328e5a2c078a3fe3b52020203517e65ee74e82ba80a0fa881e689f7615baf78f0859fc000060d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fcf567bf50600a2434362f56de8c859fa668b046005fc1e41eccbab4c0e594193f4e4e", 0xa1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:42:27 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, 0x0, 0x0) 17:42:27 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000180)="2e0400", 0xff9b, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)='G]', 0x2, 0x0, 0x0, 0x0) 17:42:27 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '?'}, 0x119) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0xe00}], 0x1) write$P9_RREADLINK(r1, &(0x7f0000000240)=ANY=[], 0xc9) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7}, 0x7) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18}, 0x18) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 17:42:27 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe) [ 1265.809156][ T3671] hid-generic 0000:0000:0000.004B: item fetching failed at offset -1227732751 [ 1265.818640][ T3671] hid-generic: probe of 0000:0000:0000.004B failed with error -22 17:42:28 executing program 3: r0 = memfd_create(&(0x7f0000000180)='/dev/media#\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$radio(0x0, 0x2, 0x2) write$selinux_attr(r1, &(0x7f0000000380)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25) [ 1265.902930][T31657] usbhid 1-1:0.0: can't add hid device: -71 [ 1265.909240][T31657] usbhid: probe of 1-1:0.0 failed with error -71 17:42:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffc038563c, &(0x7f0000000040)) 17:42:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 1265.953316][T31657] usb 1-1: USB disconnect, device number 87 17:42:28 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x91, 0x14, 0x8f, 0x40, 0x411, 0x12, 0x565f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x54, 0x74, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:42:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) 17:42:28 executing program 4: syz_usb_connect(0x0, 0x3d8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x8f, 0xb7, 0x10, 0xea0, 0x6858, 0xb0a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x96, 0x0, 0x3, 0x25, 0x87, 0x6f, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) 17:42:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_tree(0xffffffffffffffff, 0x0, 0xc9880) [ 1266.412528][ T3671] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1266.772419][ T3671] usb 2-1: config 0 has an invalid interface number: 206 but max is 0 [ 1266.780869][ T3671] usb 2-1: config 0 has no interface number 0 [ 1266.787199][ T3671] usb 2-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=56.5f [ 1266.796617][ T3671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.806508][ T3671] usb 2-1: config 0 descriptor?? [ 1267.508888][ T3671] ===================================================== [ 1267.515910][ T3671] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x23c0/0x3260 [ 1267.523681][ T3671] CPU: 1 PID: 3671 Comm: kworker/1:2 Not tainted 5.4.0-rc5+ #0 [ 1267.531236][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.541335][ T3671] Workqueue: usb_hub_wq hub_event [ 1267.546385][ T3671] Call Trace: [ 1267.549799][ T3671] dump_stack+0x191/0x1f0 [ 1267.554177][ T3671] kmsan_report+0x128/0x220 [ 1267.558743][ T3671] __msan_warning+0x73/0xe0 [ 1267.563284][ T3671] batadv_hard_if_event+0x23c0/0x3260 [ 1267.568675][ T3671] ? batadv_hardif_remove_interface+0x3f0/0x3f0 [ 1267.574911][ T3671] raw_notifier_call_chain+0x13d/0x240 [ 1267.580381][ T3671] register_netdevice+0x2126/0x26a0 [ 1267.585583][ T3671] register_netdev+0x93/0xd0 [ 1267.590167][ T3671] rtl8150_probe+0x11ef/0x14a0 [ 1267.594936][ T3671] ? pegasus_probe+0x1e70/0x4be0 [ 1267.599859][ T3671] ? read_eprom_word+0xde0/0xde0 [ 1267.604789][ T3671] usb_probe_interface+0xd19/0x1310 [ 1267.609986][ T3671] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1267.615872][ T3671] ? usb_register_driver+0x860/0x860 [ 1267.621149][ T3671] really_probe+0xd91/0x1f90 [ 1267.625739][ T3671] driver_probe_device+0x1ba/0x510 [ 1267.630852][ T3671] __device_attach_driver+0x5b8/0x790 [ 1267.636223][ T3671] bus_for_each_drv+0x28e/0x3b0 [ 1267.641244][ T3671] ? deferred_probe_work_func+0x400/0x400 [ 1267.646957][ T3671] __device_attach+0x489/0x750 [ 1267.651833][ T3671] device_initial_probe+0x4a/0x60 [ 1267.656881][ T3671] bus_probe_device+0x131/0x390 [ 1267.661747][ T3671] device_add+0x25b5/0x2df0 [ 1267.666266][ T3671] usb_set_configuration+0x309f/0x3710 [ 1267.672072][ T3671] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1267.678161][ T3671] generic_probe+0xe7/0x280 [ 1267.682671][ T3671] ? usb_choose_configuration+0xae0/0xae0 [ 1267.688467][ T3671] usb_probe_device+0x146/0x200 [ 1267.693311][ T3671] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1267.699197][ T3671] ? usb_register_device_driver+0x500/0x500 [ 1267.705081][ T3671] really_probe+0xd91/0x1f90 [ 1267.709671][ T3671] driver_probe_device+0x1ba/0x510 [ 1267.714785][ T3671] __device_attach_driver+0x5b8/0x790 [ 1267.720165][ T3671] bus_for_each_drv+0x28e/0x3b0 [ 1267.725099][ T3671] ? deferred_probe_work_func+0x400/0x400 [ 1267.730812][ T3671] __device_attach+0x489/0x750 [ 1267.735574][ T3671] device_initial_probe+0x4a/0x60 [ 1267.740613][ T3671] bus_probe_device+0x131/0x390 [ 1267.745457][ T3671] device_add+0x25b5/0x2df0 [ 1267.749980][ T3671] usb_new_device+0x23e5/0x2fb0 [ 1267.754837][ T3671] hub_event+0x581d/0x72f0 [ 1267.759295][ T3671] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1267.765173][ T3671] ? led_work+0x720/0x720 [ 1267.769489][ T3671] ? led_work+0x720/0x720 [ 1267.773812][ T3671] process_one_work+0x1572/0x1ef0 [ 1267.778843][ T3671] worker_thread+0x111b/0x2460 [ 1267.783615][ T3671] kthread+0x4b5/0x4f0 [ 1267.787672][ T3671] ? process_one_work+0x1ef0/0x1ef0 [ 1267.792867][ T3671] ? kthread_blkcg+0xf0/0xf0 [ 1267.797447][ T3671] ret_from_fork+0x35/0x40 [ 1267.801940][ T3671] [ 1267.804250][ T3671] Uninit was stored to memory at: [ 1267.809262][ T3671] kmsan_internal_chain_origin+0xbd/0x180 [ 1267.814966][ T3671] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 1267.820939][ T3671] kmsan_memcpy_metadata+0xb/0x10 [ 1267.825946][ T3671] __msan_memcpy+0x56/0x70 [ 1267.830346][ T3671] rtl8150_probe+0x1143/0x14a0 [ 1267.835108][ T3671] usb_probe_interface+0xd19/0x1310 [ 1267.840287][ T3671] really_probe+0xd91/0x1f90 [ 1267.844861][ T3671] driver_probe_device+0x1ba/0x510 [ 1267.849954][ T3671] __device_attach_driver+0x5b8/0x790 [ 1267.855308][ T3671] bus_for_each_drv+0x28e/0x3b0 [ 1267.860139][ T3671] __device_attach+0x489/0x750 [ 1267.864885][ T3671] device_initial_probe+0x4a/0x60 [ 1267.869897][ T3671] bus_probe_device+0x131/0x390 [ 1267.874726][ T3671] device_add+0x25b5/0x2df0 [ 1267.879216][ T3671] usb_set_configuration+0x309f/0x3710 [ 1267.884667][ T3671] generic_probe+0xe7/0x280 [ 1267.889165][ T3671] usb_probe_device+0x146/0x200 [ 1267.893998][ T3671] really_probe+0xd91/0x1f90 [ 1267.898572][ T3671] driver_probe_device+0x1ba/0x510 [ 1267.903675][ T3671] __device_attach_driver+0x5b8/0x790 [ 1267.909052][ T3671] bus_for_each_drv+0x28e/0x3b0 [ 1267.913919][ T3671] __device_attach+0x489/0x750 [ 1267.918696][ T3671] device_initial_probe+0x4a/0x60 [ 1267.923719][ T3671] bus_probe_device+0x131/0x390 [ 1267.928566][ T3671] device_add+0x25b5/0x2df0 [ 1267.933096][ T3671] usb_new_device+0x23e5/0x2fb0 [ 1267.937955][ T3671] hub_event+0x581d/0x72f0 [ 1267.942373][ T3671] process_one_work+0x1572/0x1ef0 [ 1267.947386][ T3671] worker_thread+0x111b/0x2460 [ 1267.952133][ T3671] kthread+0x4b5/0x4f0 [ 1267.956272][ T3671] ret_from_fork+0x35/0x40 [ 1267.960798][ T3671] [ 1267.963127][ T3671] Local variable description: ----node_id.i@rtl8150_probe [ 1267.970323][ T3671] Variable was created at: [ 1267.974755][ T3671] rtl8150_probe+0xdc8/0x14a0 [ 1267.979417][ T3671] rtl8150_probe+0xdc8/0x14a0 [ 1267.984070][ T3671] ===================================================== [ 1267.990989][ T3671] Disabling lock debugging due to kernel taint [ 1267.997131][ T3671] Kernel panic - not syncing: panic_on_warn set ... [ 1267.997135][T22218] ===================================================== [ 1267.997157][T22218] BUG: KMSAN: uninit-value in hex_string+0x7d8/0x8d0 [ 1268.003717][ T3671] CPU: 1 PID: 3671 Comm: kworker/1:2 Tainted: G B 5.4.0-rc5+ #0 [ 1268.027138][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.037190][ T3671] Workqueue: usb_hub_wq hub_event [ 1268.042287][ T3671] Call Trace: [ 1268.045574][ T3671] dump_stack+0x191/0x1f0 [ 1268.049898][ T3671] panic+0x3c9/0xc1e [ 1268.053807][ T3671] kmsan_report+0x215/0x220 [ 1268.058304][ T3671] __msan_warning+0x73/0xe0 [ 1268.062799][ T3671] batadv_hard_if_event+0x23c0/0x3260 [ 1268.068176][ T3671] ? batadv_hardif_remove_interface+0x3f0/0x3f0 [ 1268.074408][ T3671] raw_notifier_call_chain+0x13d/0x240 [ 1268.079871][ T3671] register_netdevice+0x2126/0x26a0 [ 1268.085082][ T3671] register_netdev+0x93/0xd0 [ 1268.089664][ T3671] rtl8150_probe+0x11ef/0x14a0 [ 1268.094424][ T3671] ? pegasus_probe+0x1e70/0x4be0 [ 1268.099359][ T3671] ? read_eprom_word+0xde0/0xde0 [ 1268.104289][ T3671] usb_probe_interface+0xd19/0x1310 [ 1268.109496][ T3671] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1268.115404][ T3671] ? usb_register_driver+0x860/0x860 [ 1268.120712][ T3671] really_probe+0xd91/0x1f90 [ 1268.125339][ T3671] driver_probe_device+0x1ba/0x510 [ 1268.130812][ T3671] __device_attach_driver+0x5b8/0x790 [ 1268.136192][ T3671] bus_for_each_drv+0x28e/0x3b0 [ 1268.141031][ T3671] ? deferred_probe_work_func+0x400/0x400 [ 1268.146746][ T3671] __device_attach+0x489/0x750 [ 1268.151521][ T3671] device_initial_probe+0x4a/0x60 [ 1268.156534][ T3671] bus_probe_device+0x131/0x390 [ 1268.161389][ T3671] device_add+0x25b5/0x2df0 [ 1268.165905][ T3671] usb_set_configuration+0x309f/0x3710 [ 1268.171381][ T3671] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1268.177456][ T3671] generic_probe+0xe7/0x280 [ 1268.181953][ T3671] ? usb_choose_configuration+0xae0/0xae0 [ 1268.188129][ T3671] usb_probe_device+0x146/0x200 [ 1268.193076][ T3671] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1268.198971][ T3671] ? usb_register_device_driver+0x500/0x500 [ 1268.204857][ T3671] really_probe+0xd91/0x1f90 [ 1268.209454][ T3671] driver_probe_device+0x1ba/0x510 [ 1268.214575][ T3671] __device_attach_driver+0x5b8/0x790 [ 1268.219949][ T3671] bus_for_each_drv+0x28e/0x3b0 [ 1268.224789][ T3671] ? deferred_probe_work_func+0x400/0x400 [ 1268.230510][ T3671] __device_attach+0x489/0x750 [ 1268.235289][ T3671] device_initial_probe+0x4a/0x60 [ 1268.240313][ T3671] bus_probe_device+0x131/0x390 [ 1268.245178][ T3671] device_add+0x25b5/0x2df0 [ 1268.249696][ T3671] usb_new_device+0x23e5/0x2fb0 [ 1268.254730][ T3671] hub_event+0x581d/0x72f0 [ 1268.259200][ T3671] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1268.265083][ T3671] ? led_work+0x720/0x720 [ 1268.269402][ T3671] ? led_work+0x720/0x720 [ 1268.273734][ T3671] process_one_work+0x1572/0x1ef0 [ 1268.278787][ T3671] worker_thread+0x111b/0x2460 [ 1268.283657][ T3671] kthread+0x4b5/0x4f0 [ 1268.287721][ T3671] ? process_one_work+0x1ef0/0x1ef0 [ 1268.292914][ T3671] ? kthread_blkcg+0xf0/0xf0 [ 1268.297500][ T3671] ret_from_fork+0x35/0x40 [ 1268.301954][T22218] CPU: 0 PID: 22218 Comm: udevd Tainted: G B 5.4.0-rc5+ #0 [ 1268.310453][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.320502][T22218] Call Trace: [ 1268.323792][T22218] dump_stack+0x191/0x1f0 [ 1268.328119][T22218] kmsan_report+0x128/0x220 [ 1268.332622][T22218] __msan_warning+0x73/0xe0 [ 1268.337120][T22218] hex_string+0x7d8/0x8d0 [ 1268.341458][T22218] pointer+0xbfe/0x1d10 [ 1268.345623][T22218] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1268.351505][T22218] vsnprintf+0x1c0c/0x3210 [ 1268.355936][T22218] scnprintf+0x235/0x300 [ 1268.360197][T22218] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 1268.366301][T22218] sysfs_format_mac+0xde/0x100 [ 1268.371086][T22218] address_show+0x159/0x1d0 [ 1268.375583][T22218] ? link_mode_show+0x1a0/0x1a0 [ 1268.380426][T22218] dev_attr_show+0xd8/0x1e0 [ 1268.384938][T22218] sysfs_kf_seq_show+0x434/0x7b0 [ 1268.389877][T22218] ? sysfs_kf_write+0x2a0/0x2a0 [ 1268.394724][T22218] kernfs_seq_show+0x164/0x1e0 [ 1268.399485][T22218] ? kernfs_seq_next+0x3e0/0x3e0 [ 1268.404428][T22218] seq_read+0xac6/0x1d90 [ 1268.408697][T22218] kernfs_fop_read+0x2c3/0x9a0 [ 1268.413478][T22218] ? kernfs_notify_workfn+0x960/0x960 [ 1268.419124][T22218] __vfs_read+0x1a9/0xc90 [ 1268.423468][T22218] ? rw_verify_area+0x3a5/0x5e0 [ 1268.428314][T22218] vfs_read+0x359/0x6f0 [ 1268.432467][T22218] ksys_read+0x265/0x430 [ 1268.436707][T22218] __se_sys_read+0x92/0xb0 [ 1268.441116][T22218] __x64_sys_read+0x4a/0x70 [ 1268.445606][T22218] do_syscall_64+0xb6/0x160 [ 1268.450105][T22218] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1268.455985][T22218] RIP: 0033:0x7f7a98710310 [ 1268.460413][T22218] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 1268.480265][T22218] RSP: 002b:00007ffe1722bb98 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1268.489021][T22218] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f7a98710310 [ 1268.496988][T22218] RDX: 0000000000001000 RSI: 00007ffe1722c040 RDI: 0000000000000007 [ 1268.504942][T22218] RBP: 00007ffe1722d170 R08: 00007ffe1722d170 R09: 00007f7a987667d0 [ 1268.513344][T22218] R10: 322f326273752f31 R11: 0000000000000246 R12: 0000000000826c90 [ 1268.521301][T22218] R13: 0000000000826d80 R14: 0000000000000001 R15: 000000000082e5f6 [ 1268.529277][T22218] [ 1268.531590][T22218] Uninit was stored to memory at: [ 1268.536603][T22218] kmsan_internal_chain_origin+0xbd/0x180 [ 1268.542315][T22218] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 1268.548413][T22218] kmsan_memcpy_metadata+0xb/0x10 [ 1268.553454][T22218] __msan_memcpy+0x56/0x70 [ 1268.557882][T22218] rtl8150_probe+0x1143/0x14a0 [ 1268.562650][T22218] usb_probe_interface+0xd19/0x1310 [ 1268.567835][T22218] really_probe+0xd91/0x1f90 [ 1268.572411][T22218] driver_probe_device+0x1ba/0x510 [ 1268.577506][T22218] __device_attach_driver+0x5b8/0x790 [ 1268.583041][T22218] bus_for_each_drv+0x28e/0x3b0 [ 1268.587898][T22218] __device_attach+0x489/0x750 [ 1268.592653][T22218] device_initial_probe+0x4a/0x60 [ 1268.597668][T22218] bus_probe_device+0x131/0x390 [ 1268.602511][T22218] device_add+0x25b5/0x2df0 [ 1268.607009][T22218] usb_set_configuration+0x309f/0x3710 [ 1268.612456][T22218] generic_probe+0xe7/0x280 [ 1268.616955][T22218] usb_probe_device+0x146/0x200 [ 1268.621793][T22218] really_probe+0xd91/0x1f90 [ 1268.626368][T22218] driver_probe_device+0x1ba/0x510 [ 1268.631462][T22218] __device_attach_driver+0x5b8/0x790 [ 1268.636815][T22218] bus_for_each_drv+0x28e/0x3b0 [ 1268.641656][T22218] __device_attach+0x489/0x750 [ 1268.646406][T22218] device_initial_probe+0x4a/0x60 [ 1268.651412][T22218] bus_probe_device+0x131/0x390 [ 1268.656243][T22218] device_add+0x25b5/0x2df0 [ 1268.661125][T22218] usb_new_device+0x23e5/0x2fb0 [ 1268.666001][T22218] hub_event+0x581d/0x72f0 [ 1268.670440][T22218] process_one_work+0x1572/0x1ef0 [ 1268.675467][T22218] worker_thread+0x111b/0x2460 [ 1268.680250][T22218] kthread+0x4b5/0x4f0 [ 1268.684321][T22218] ret_from_fork+0x35/0x40 [ 1268.688807][T22218] [ 1268.691123][T22218] Local variable description: ----node_id.i@rtl8150_probe [ 1268.698204][T22218] Variable was created at: [ 1268.702606][T22218] rtl8150_probe+0xdc8/0x14a0 [ 1268.707277][T22218] rtl8150_probe+0xdc8/0x14a0 [ 1268.711931][T22218] ===================================================== [ 1269.522023][ T3671] Shutting down cpus with NMI [ 1269.540458][ T3671] Kernel Offset: disabled [ 1269.544816][ T3671] Rebooting in 86400 seconds..