000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) getsockname$packet(r4, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000001780)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/btrfs-control\x00', 0x537da5c8cf162814, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000001800)=r2) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000001840)) 20:14:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x100000, 0x1}, 0xfffffffffffffcfe) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f0000001240)={0x2}, 0x8) 20:14:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000000000001000000", 0x48}]) [ 592.469186][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:27 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r0) 20:14:27 executing program 2: getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) [ 592.537726][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 20:14:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000000000001000000", 0x48}]) 20:14:27 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xa2080) write$sndseq(r0, &(0x7f0000000040)=[{0x9, 0x5, 0x7f, 0x82, @time={0x77359400}, {0x4, 0xff}, {0x80, 0x7f}, @raw32={[0x3, 0xff, 0x8001]}}, {0x1, 0xff, 0x40, 0x80, @tick=0x63a, {0x4, 0x1}, {0x0, 0x7}, @control={0x1, 0x8, 0x4}}], 0x60) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000100)=0x575a97b8) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x1f, 0x5e, 0x8, 0x5}) r6 = socket$inet6(0xa, 0x400200000001, 0x0) r7 = dup(r6) setsockopt$inet_tcp_int(r7, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r7, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000240)=0x3) 20:14:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) capset(&(0x7f0000000180)={0x19980330}, &(0x7f000047efe8)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400198000834b80040d8c5602067fffffff81000000000000dca87086f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a500"/88, 0x58}], 0x1) 20:14:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x9, 0x3f}, 0xebdd) getpeername$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:28 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) getsockname$packet(r4, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000001780)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/btrfs-control\x00', 0x537da5c8cf162814, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000001800)=r2) 20:14:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) capset(&(0x7f0000000180)={0x19980330}, &(0x7f000047efe8)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400198000834b80040d8c5602067fffffff81000000000000dca87086f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a500"/88, 0x58}], 0x1) 20:14:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0xffffffdfffff8001, 0x0, 0x11}, 0x98) sendmmsg$inet6(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='X', 0x2468d}], 0x1}}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a80), 0x0, 0x0) 20:14:28 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 20:14:28 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x5, 0x8, 0x1, 0x2, 0x3, 0x8, 0x9, 0x8, 0x80000000, 0xae75, 0xd9, 0x2, 0x768, 0x1f, 0x10, 0x51}}) 20:14:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x5, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:28 executing program 3: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 20:14:28 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'ip6gre0\x00', 0xf001}) 20:14:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) capset(&(0x7f0000000180)={0x19980330}, &(0x7f000047efe8)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400198000834b80040d8c5602067fffffff81000000000000dca87086f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a500"/88, 0x58}], 0x1) 20:14:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0xffffff5b, "20458c341c4fed919a81b979fab4530a235f27ab00af5d08979af980eec324b0", 0x2, 0x1}) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = socket$inet6(0xa, 0x400200000001, 0x0) r4 = dup(r3) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) write$FUSE_GETXATTR(r4, &(0x7f0000000140)={0x18, 0x0, 0x4, {0x80}}, 0x18) r5 = semget$private(0x0, 0x3, 0x41) semctl$GETVAL(r5, 0x0, 0xc, &(0x7f0000000200)=""/4096) 20:14:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5100, &(0x7f0000000000)) epoll_wait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0) 20:14:28 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @remote}}, 0x1e) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000000)=""/224) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:29 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) getsockname$packet(r4, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000001780)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/btrfs-control\x00', 0x537da5c8cf162814, 0x0) 20:14:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0xffffffdfffff8001, 0x0, 0x11}, 0x98) sendmmsg$inet6(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='X', 0x2468d}], 0x1}}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a80), 0x0, 0x0) 20:14:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000100)=0x5) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) 20:14:29 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) unshare(0x4020400) setrlimit(0x7, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 20:14:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) capset(&(0x7f0000000180)={0x19980330}, &(0x7f000047efe8)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400198000834b80040d8c5602067fffffff81000000000000dca87086f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a500"/88, 0x58}], 0x1) 20:14:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e24, @multicast1}}) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x3000000, 0x20010, r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x5) [ 594.252381][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:29 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) dup3(r1, r0, 0x0) [ 594.319244][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:29 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2f1ac61d01d2247a, 0x20010, r0, 0x0) 20:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) 20:14:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f0000ffcffc)) 20:14:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0xffffffdfffff8001, 0x0, 0x11}, 0x98) sendmmsg$inet6(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='X', 0x2468d}], 0x1}}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a80), 0x0, 0x0) 20:14:29 executing program 3: unshare(0x20400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb704, &(0x7f0000000040)) 20:14:30 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) getsockname$packet(r4, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000001780)) 20:14:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f0000ffcffc)) 20:14:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fc, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0xe7ff}}) 20:14:30 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) socket$packet(0x11, 0x3, 0x300) ftruncate(r1, 0x10099b7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0xa, &(0x7f0000000000)=[{0x8001, 0x4, 0x69, 0x7596}, {0x4, 0x5, 0x5, 0x1a971f79}, {0x9a, 0x5, 0x1, 0x4}, {0x200, 0x3, 0x73, 0x8d6}, {0x1f, 0x1, 0x20, 0x7}, {0x401, 0x5, 0x6, 0x2}, {0x200, 0x9, 0x5, 0x40}, {0x80, 0x40, 0x67, 0x4}, {0x4, 0x4, 0x20, 0xcd}, {0x2, 0x1, 0x1, 0x7ff}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) inotify_rm_watch(r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) 20:14:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0xffffffdfffff8001, 0x0, 0x11}, 0x98) sendmmsg$inet6(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='X', 0x2468d}], 0x1}}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a80), 0x0, 0x0) 20:14:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fc, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0xe7ff}}) 20:14:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f0000ffcffc)) 20:14:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fc, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0xe7ff}}) 20:14:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f0000ffcffc)) 20:14:30 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x3, 0x200, 0x1, 0x1000, 0x6, 0x5}) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fc, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0xe7ff}}) 20:14:31 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r4, r5, 0x0, 0x8000fffffffe) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) 20:14:31 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) getsockname$packet(r4, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x40, 0x0) 20:14:31 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x400) writev(r0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000000240)="99", 0x1}], 0x2) 20:14:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 20:14:31 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x1c, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 20:14:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0xfffffff8, 0x3, 0x4, 0x10, {}, {0x6, 0xa, 0x4, 0x20, 0x6, 0x4, "470f7e51"}, 0x7, 0x3, @userptr=0x7fffffff, 0x4}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x1, 0x3}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002200156149bbe2cb9dc8145aa00000000000000", 0x24) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x5e1540, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr="78f9892847ac8fcd3cb571ff06572d45"}], 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x12300, 0x101) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="a3b997d5c5c444dc5821cb495640a7fe552a1d6449e686b46046acf9d7000000000000000084db854822aa669e23baabb9b4632de273327973da98986772c951a3578398f531865cd3cdcb7fb10ac09e3ca588c4f60436c81a8b4e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x2cb, @mcast2, 0x3}}, [0x5, 0x55, 0x6, 0x400, 0x16f8, 0x1, 0x69, 0x3, 0x620b0d7, 0x4, 0x2, 0x7, 0x0, 0x100, 0x2]}, &(0x7f00000003c0)=0xffffffffffffffc4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x84) 20:14:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x119, 0x24, 0x0, 0x274) 20:14:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r2, 0x0, 0x30}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/136, &(0x7f0000000140)=0x88) 20:14:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{}, "2b4ccaa5eea22d0c", "3bbf01f143723b3d4b8698b963a2c462", "537f5b2a", "edb511c4bf116edb"}, 0x28) 20:14:31 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000032c0)=0x10000, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100000000000000000000000000000000000000000000000000000000000017000000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r7, {}, {}, {0x3, 0x1ffc7}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{&(0x7f0000000100)=@ll={0x11, 0xf6, r7, 0x1, 0x30, 0x6, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a1c92375d5ff3d06afb5f3600c563ad1e555dbf92f0f74d847295fe7564ce15a400a864a689807e81a8bc827a87c208d5618b51afd3def65e94db9aa64a1761ea2dd43fc23c4e1296fc996a38ef1c11d67e0e0695cfbc04ee67b22d167301536a85e88c8d3a7b431dff32ea900c5156240ff50e7143518bdc60fb1faf9c15b7c1d39ca91ce70ed5f90cb396808f08309423e4db05f7f5e555fb2ecb7adcf133752d29b62a3eee0d023e7cfb9b245528a5a50875e0cc2", 0xb6}, {&(0x7f00000002c0)="b86e01c5f2223826690fdaaa45f33bfd08a3845716a96474739248ab05257428548945229a40c1a293540968c2f4218921214a37bfede0415f5acde1fc6c10b6f4caf15b55f1103778d1e703d9644eccc0956e7a31a4c13c906e98a32bf32d9f99d74e6240e8138e03c124d95711ca8b3fcf388440915daa33d1d751e17711d264415b12c01b4f81bb49fe348180c8d85c0209cde49ff58a", 0x98}, {&(0x7f0000000380)="e839483adb30e95186a86d80750c53b63cc564a971bba8c246fd03f550a570b0f34f3505fc1b3f276c7e373790b024d29dd98c74f689e3e2a2343b12165db5c242b67da8a1ca899c60ef436c0a5f0a51955f2bde9a5a1138b0bf702f1462b687a23b09325bfeac89a482fab624aed8043bd626e7ab86bdf97777a52f336a6ce8d150fb9cad51fa8c07ecc8bb77e4b993531cd77ec9f70d9c4216a81bf4ed1553b76ffa6ca20959b5241c1bc6316d76d230654bf70dc89f45c02d4d22fafda0721c", 0xc1}, {&(0x7f0000000000)="b1e0de93923eeb48445cea1a417d1e9d48733f1ee3eb6dcc58b0290c5f71d816d21d303ee9b16036", 0x28}, {&(0x7f0000000180)="235c35b756ecaae0dd62f91537330ec6fef38424d24b750e053be69a41bfad5f7bc0253ff7f0cf91f5a7c17a52d5510682c6b09dacd3d1a2", 0x38}, {&(0x7f0000000480)="584300d7efd848fb385091c442e7a38d0c8d4f46ca220f8d3f76c2af3448841853deef5a59d986", 0x27}], 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="00010000000000000a01000009000000c9674c55ad125abc2b7968c5f6198e9c2a892e576de92589a7ac4eb9e43bb57595ed395393ecf65d81b7bbd2f3c369fefc3b58beaf8b68e7b9037c8bf60bfac4951813b1723730b5aeba6b564efbee8f4fb84198401d5472c30cfb761135b5c8ee49a6e607e3b07bc96538e365738b0ad84bb70fc1c031556535a93ca25fbcd6a5951f66f147f2d2b962b924ad0f60acba92ce53936138f36768fdd791a1952d301a20c8466e4bb79b3c32530a4caf05f5c9d858d2f192e0e38836dfa7d7d12e4603a7b453de91c71ef33690d408569775dfdad87b28eca30a273ea0850376d1ae41babf0c0bb5d22055a8000000000068000000000000000f0100000700000018d3c4b8012c240edec8951b4212cf5dbb1d5b8af5c1fba183b6a0a2062cb0ff1fcd027e72776cbb46befe4c1ed9645d690465b1132b86f174ebda4733c6c6c78a76da4023ebf6e509211ec03ef2d5675156f18319000000200000000000000004025ee2060000009142ed5e7adc86625da417f200000000e0000000000000000c0100000000600024f0bd0658bbe9b3696d7541dcdd1299def8f2aa9cb2ac6e122ce16c2272f71944756af8b1f7e4ba3e006ffb786240a1fd75007201c9bf356b92a98b84199ec30e0c00617f6bbf5336eafc5b6a7f76044a5077124f9b8184d1717376c72228ec33bb488780c5529b52d1e602dfa45d2db980a3d551b2ef4d451ce1f3d99fd75867aff50a777216f9b596af824ebdf6109b0f983882c762a08ee1caf4e8c765ce8b2811dc6851c64e8baf5132b63b4e77d4bd2268b6c95cd2f070008d9ad0afbb1daed7951912b5ee2e474c000000000050000000000000000f01000012000000d5d4647af74661d1c2da8ac40a113b006b45ed346c61802651eac8bdbb562370f615fe882d46496034f025c3ad4b217230e340baddf759eca8e011eb25311300101000000000000017010000080000001556cb2f5ef7197df2deda8e7eaa242e1570ecbbdb52c65d2e314c2e420a42e713a82e9ea4022b8fb57cda8f9563874f70cfff4f343ecff2010f229b2e21105cb2d936a61db26a82e4c2d85068ed720d446e0b33a0268cb4beda73127228e4142741ad85deca6b406d8697c916d2bde062b051d2e2d6590aa61591d9709155b8f580726a01d3909e36fcd22bb891bb305816a9a387c38b44a50e4a9cfd4031f24875fa983f2d1fd3258dccef9255261e6bc14e9cf4147ec55cdaffb4a0e7151e104ff2ac4fe84b1d9d6a7fbd0915bf8de03614b9cc0ddc8322e58f3a98127f451fed473033c2dfb7b4134ba607aaa7ca3855d7d7d8d113e71bbd88eda4be21761fba510f1028f9d9c29957182521d19d9407d9e5221eef1ae8f7f30406bd3a30c0575e4b35b7d829bbd2483e228dd5de0214a4962c992ff6b3a53ae0e7514c3bb9de44402c125169d0fa01cd37e1ce7f6edebaa3c98faa84c65a2dd1025fd22d4b44dd07ac02662eb134dae5143be81a7fbaea390af8682e4e7987f949829110164cadad3d624c5e54f78da3290c12d98a66f4e83223fc7cd2f2445aab7ee3578229fcab822b21b9fd25b11fedb02f7f376557ed71de04783ad582d667046b1fd40171d1ebb20b8e616c7238376849b6acf219e694164e19a9c57c5c255adc0e188f874770075b5358df08f7f1626f523590edd4ca03719ad563ebe0bf196095f880a22c7810e554a2d1badfaeaafbabb0cadc154c50fdce3d3d919e7af7e4ab275811eb21238934071c6355842c0f25f97d13b46fa6aded2843008e8883c1c604c6c1f0b89fca12376e82313ad4fa2c4ca4037554fbb4cd00ab2e4c36831fe3d53a0e199ae20d9c62a0e9ab7b268de89d38ffb8597260945ffd621cf05622fbc2ae588f3b35871eaa28081c5cd1d102df169ce2ec0d554e6d7792bbc53969c4b2c00d119b9ca5e13faa42ad481e8b27c58d5d9cd10fdfdf9370372448d1c457c0e5eb36b8dc1f72ffd29f99a824e4cdd025d454a844bdb2a4f245e3c98c203f361e5c1aba24b485157cf135ede08a3524c1330f0afb4b0061a37b05382354b8c830292d02ead79727a1537e36e537cb57461d9741f6d6422ea1865bc6c4c80bfaa3762cfe976e9a39bdfa9ab43a84c4e23c11ddf8fda6ac1a9657fc6704712f1241ae46774e5d620173e907392f4dfa1cdb9d99c1cb87e6d0bf5b27ef5b4a1ae79db3149e4ed5776658c4546d0721b3eaaf2030378afdf59456a5ef68b6574e3ffc83356f329c1b67a83c85aac534250f674485286b2b3bc3e409f06ea90c8ae02457c9f53d7626486e44ca9d93b9d7a36d63d7a146206c3b6c7c450c1a4bd76ca294099f383d90136e564b5f30eb4411ab1ef52e210b6eeb86cbe81b3a35fb1a7ed311b6f5a211a931956eefdb66aba52b078e3eb7a087775ad69db4d0380d5f216db63a2bb4492613c368b668a28c1d1f1e9b0c0762126daa77ba82a1050bccc81808494c8537aea1d9bdc3107a75fd148a0b424cb11760b5191ff591489d54698482e55351ff8b228e485fd656a7c000157849e8e832c5ed54a92199c5457abe0716aaa71f29b78b9e0ad1ea06fbe4c4b3ff649b1c12b4f8f73e4b51b3490bfc9b4153c1bf0412f8ab2a1c78dc51cc52b0f2db1d20c45e6736c4086b8c38ecd157fc25f37e63a9461643c469d6582fe39aacc4a90a77d176bb7b4ebc778f12b186feb9aee3830d2517f86c9a02e9106b5aee7cffcd9c8e768b46a2822caef26a3a592ab63fb596f4a328b9ed3c1512b760bf1e0b4310893bed5aa858a0186bb33ca32ae398df31ba071ebb40f8fd9bbcbe3fc51a0b48b95d370b3a7abf63710855d6782b7961e40c4320df676fd631a01cc04d06fe2a29f484a34ae450b1945a2e442ff7d2c79351eb070080c66d5f87788e7d3054b3a30728c66bb48e1ed8e92e1762208010d4196b8a8f59641c8c9756480d80e94ecb3de765ce9af6019e5bf0b197d23655d0af92ab79d01695861dd9933efa6dd99b6af4132f8ea7ef927a98274038802138486f70f35665a814896b19c7add94f22056d069e0f83bdf5e2f738fa992071cf95cb29826f6f623f32e2be89b6a477d9b31480afc3e842e593a0ca20181a3444cafc350cd7a83c1636f063c556f2029aa0e511d1c6781c3a698056fc94318c7fce068aee62304386cf8adee94b50d44caeff1439071764a030c55d7703ab1fb710a9973c26bfd10e90fd84f7839965e8b0f55f5a14628a5404b2d3b5f018a75cbe63747fb08ff6dc9be86dfcd07e492169ef9fd8388d268ecc3eb3ba32797ac6666fde2e0e41ac3ef6843a1fc532edbb4bd3ee2c956431e5a5a09f9593b797efa5fbaa76490ff315286632fe48ea970beacf883dc26d6bfe0a9fbee790faf9fc2ab254e9853567f0a7f2e110296b460f8cf29009b99be0671ca015c0e7d791dbc10f3ef1a50b6781a8e25bd416acd569c7d4167b35b97b5eda73368049bbb76f84dd30f88b15b59596867ce840dc799c7b8e04a19810940d6d33155643b99c49b1e3aa7aa81ea700d41545ff070c03033a4a544665f142f50dcd448cccce5ef964a66caf3cf028d0fa1e415d44a0399643574c1a68d4b13b49e9283a373930598bd9af4c972a7542b5c3d0def900a2e34a190ccd1fc9fba9193e135094b0b0032988aae0d03628e24c0b03cdc67b33d8fe72aa59ee71b2b593cdfc65982717fafe6bb2559c6b96d10266eda694bde18c7349468ec6fba34e446d952ad00f7de8f6f1cf08032fcdf377991def3c439d0025f01e0878a40e511ebf5502913a3f5f7a1781e96ed62878bd65ad96a935a2cec227ded9e7a7aac2715a792e0a6b7d84fc734ee792ca3f99386db230ee23562164980dbfa07ba72f2dbec7b4686215c20beb825a0640241e7887fac23092dca1b6b782b9fd651389f70d10df2079dc99ce64ccc4b6c73075d7cc57fa3143a7110ee45530977ed6bc71c53f5a7779e50392786323c3a4eae82cacae7f2d39d4d03e9cab75c4b464dec30cc06510857f71ead4076efd6350ca34f7285fa169fc5f033ec1b1f835d659a8a9830779e532448296afd018bf8043b317c580fffd0fc7ef5dc6c7b827c09a84d6d73f36b16966a91a31e7d896c908952abd99312b535069b70a0470031f2c4924e204d559de1a347ff58b326944164e9fbcce185cfa404e412448ca6c9d28e9dbbcd228a458c118a176675384b01055fdc94939f755422be71f81d4b88193f4076b4f210fcff120ae71a2b49cf53cf6e7a840be8e47e19ac16d9db1f5a928c565e6bb6c53e1268cf5e3a36de5df027d32260be80d4ca0b5e8b32cef3fdde1454d136c42edad7f37f11560929619fc3357b2581b4103f239c98285b4e81753936bb439f4080bc8711389babb3f1b6d6040595d987884f42dff62610570edfda22006d177ea06c7a7b27c769bceb017a4cafbc92cdb52fcb92f579aa09fa95df12d69765e54b415dd611f64b9fbb4e7c01966f07e4a02fe17591e5b6f82769a3ebe0c0aa534f81acc9d8f08771a5d0e9efcd976d2d2bf77424c79f3f7e5bee182e571be3405038efe2fcd979110fb64238c290040bece29d1968a6d58238cb43f22f041e257e69186c9e84471f2c0fa3702588a0f7711602b6080eaffabb49f5d35c2626de40eecb9368663121f5f65a56c24f1163c9030c590ce91cf6f285816e581ec92097adf16bbcc71cdbccb5e789b3e3ac30c0a17c4fcfe7e5cec7c412b0aa215e24cb4214c15f1203d57762ae016043384156b393d37a215b8a7f5ac4605e72c414dac571e8803d23591b63029ef72b638d51171465ba0857b79dc7796b6457e418cb60eeefff173bc8fb22776db5a80368d0095374b146e11550c2c821fbac59b5dd30a39c169b24b10e49ae8a6a9a36714b8219930346ecf1517b5b3283b71ffffe1119f26eb75cd1e3f8c8e9753be7452136951bdac7708427ff59450e3c2ca19cfbd7f59071a21facc60b2aa257744027d6203222c22defdbb216c36a7504890cd5948911f091e1a072ee3ee9246df21eb4156fe4dd502ceed77c2a0ad73323b855a9d62b8b76c8b4251fc6fa79a8d0970ce64c6cc216f97060555cdde6a22e38ddecf468ff385c83c9e50fafbc3c454ee69be4151e807e59835b927f89ef5f2b31c2ee65f687b9f6361ff282b742124f11a3dfe8a81045b9c9e3e7690289eec0200b0233de5d28fe61f6543367c7056ed48a508fc25cb6ee8ce6979cd9349b913b57e4f9fa8dac68e01358ee72cd924178e49542fcaf3a46d7c126c9bd7a3ca75be92872dd78fd6e68fa0baf0e3247c757de0503e8f40c9e76c68e1930ceecbedb408fb1b9ea471b8de4a4965c124ea7d89b83441c73487eb4aabb4a93cd1625eede57abc6ae1eb076056655073eed8994473a59fbd05f891d901a265d4935915e32614dfcfba748d227cc52faca300d3166b98c7db44968c830fcb9979301877c9f1f17a0b445fd8e95c3c5f64330b27ffd09040c7f6de524b15625a2723d241a89f44a56307664a3ea1de190fdb852278acfd772fd7a3f779478115be7d9b0407d60970573ed0ba153a7db15335a903c7fdaea19ad24ed01129075918c924773a5e9728397d4199c8e46ead52a9b4f251ec2165574fcf72d5061cba2879857c36164c26645ba9d5976c8522d4acb53bbb1a320da9516b4d7c45e539316fda8a637cd2c4fa1ff3f15d47c361ca9aee6125001d692df3b19e3bfd040f001ef7f4b64a22e78dd81821d4f1545811508a84f81e1ae98c80f9a0bb8991d75072cfe9386b5e1b6ddc45851f715460da26a7c366a0d38be7123a6921726088f9c572bd537073b3e8d610f73f2e3443dd7cae7b7bec1d145908ff80441f048da7f401647091f0995fe2fd0d3539a7a93a480f1397a6ed19a831f5dd0cdf4f514b4a60dfbfdb65b5e4bb1af4f3e8ef1ca3c8ee6968cea22bdfef44d50fe318e7d336c387d30e8da127620eed200b24ca1e6db78d357baf7f301f157752f0dc0ca2455cd121374c89e0f6b23172fe3291db4d6aa0b934a1ce2bc0f748130dfcadc1c0afb6ebdf5717df38378ab2c07c61aa875d23306c78f78f6908c15ad71557aa83ada4e0749fc543f382b2d3c9e430e82436863d0b79ecda31459534408c2cfcdcc549167f4bf17862668840757974fbcce74dca88a9ee5b37c4b1ed0105614fa6135bcb62bb713059cb18b36bd821ade443fb7687b13be770c15ba2f3d771143fda9c60f5a988f5440f60d6a970777b7f8d46d71631ae9f5873d70fd79e7c3c945ef23aab85bdd41cbe175ad20efbf44c1d774b58a240f97b489d04be81684dbb3fb85b5948ae6f3ec72e324c427c1ade5ec358634e549706b45a0283664ceef0ae5f2d7a211386966954183009ebe82767d57e1faf7c6184ed2b79f313f00e77517276c3a4f90cfb7b0c8290be50e36ac476b39a81f1ea2e0948b3ba1a942aceff9782c795b274d102d1a6c88468005f76fe9101d9f714136658b9f0830daa6ea16d9c8a31de488406dd01b96361d9b1178163488cf543e4b0e2ce26afaae4d6574bca9c4da30e4e2821f9b162cffb3e07385ce8cce965e2f70615b87bd940a4d8f946986f3e130091954df74ce9c19fc4d2ba7adf3608efe5cae96881c0ea4a69c6b136319f8ae5dd9348633879a3e357c4930e376dcf0e85e08abb5a08c0670970e7be0c8b160a7387cb39015ee4fb36baa4796da1b76fbe0c4d36d9ea701c42cf5548fdae369514ea93aa2da094fe0445061a94c9457b7476"], 0x12c8}}, {{&(0x7f0000001840)=@generic={0x2, "d494377b78e114680fb6b8fde1b94019ee84e851d18bef9b789287a6f29884403ba854f91b2954d8843801e25c35133146c5d18a4855c182d527ad5d319836dd8bbaedc745d856eb815f5a150e5aa13e585d9f3fcc1aebfe66252288670360bb606c2e7a6e63a34a87593241f987b74293dc0d161083f90e080d53a9e2e8"}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000018c0)="e894cbd0fae863fe762b1604c0854a705995c5d6d92348c587e9da52066c57996f78264063dd7c8dd297334f5a258dd64f96cb944dc5871fb63f22274f8068c69a26394c63dc07ec036380f898f9f3fbd866157aa3aa169ebf9897b04e0263e6c6d095b6bdae5469fe621ae586f79c06aa6c23c132266934f2f03ff18bd868e60493cf48416276a153bf53805324cd107f197d9f95d05c72f8b63d1389c75ec2af7f03d732179371e56a4afbd395d2af08531eadba247329b04289b03445cc5c3bde6185cb6ebd4f1532afb7e659ed3edbf3becb6adc90d6ab87851d", 0xdc}, {&(0x7f00000019c0)="581a4c4fabaa4f4a90e7ff1b9de1ad4a9b37c3221dbddfb22832d87b4f4df508ae0fe8b64b7e76086dc9a873ea87f3c32342414dbc530793d19fe3c8a0369ecdce7736977f3a3bfcfadc084d23dffbaf3b4952464cf00ec152e41e61d09cfe33dcff708f7c", 0x65}, {&(0x7f0000001a40)="c627ef9c0bf338e54abea13cf2c73c1cacc4fda91868d70cf38d6eb30dc78c6bb6629152128f840a52cb91bafd377e999fd3c4135117258181e43db486faabc94d8bb7844d29f8a7776ce41e8aa34a23deabc4a7118cde3bd88306e5b6a1f4b558a8b25bb6812b7ecd81bbcc3ab01c88afb4b5bf93f882cb68c3f2e6c9da5bb9712ef548a444fe8a48d1b112c80820a506563ce3928b7b9168b7bc0726db20958eb865c79f0cca1fb62aa53ceb243cd6f0827f845bd98a0144b76117faa2f6e1", 0xc0}, {&(0x7f0000001b00)="ebad9512c692f764a93921a524669e61df517541e18b681b98393db261a8e0f98506f8933e0d9b912295e55f5e8462e06808834b2a2aaaacf591d44a41034c6cd6a464790b4aec826a9e84056f6aa80f9c98ba0314cedf8a7136db2b3a93d8da02699eb248668853", 0x68}, {&(0x7f0000001b80)="1051f39f3ce3587ee71d7acbf1d21ddab30b6b3707136e76a4fcd018afd2024c82cb808caeded3cd91bf429da5318167", 0x30}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="524e45d12f95bcb8a2953b6991f2f41e68f7214043e6eafedb09043d1437d62dd7e6899ebc5a62e7f33f85aadaeda7c5b10011b835bed5020607bffa44ce5b671663e76110d659bcba9b", 0x4a}, {&(0x7f0000002c40)="5d0190b3cba96dc83245c8bc85839422d94c50768b1c4402c4bd0415dd8ff5ddb07daa24edec5a52a63b0a8bef81fc318066c179315044a90939746042c6ea19f79d9227e12339d2e73b8c74ebe0a81ab87bcea454863f514f57106bbb792013b8412f0744e9069df0521339b48a98a881365cc3950c65f40b76ca84576e9dce64236cc2f07fd1d285139ef3c3ccd60e7bfdff10f8a4888a3deaed10325141262270db3961f9b89dabc0745e311d1f1fdb98973886ffc4fb2f5e682559ef12a4aace5aff7c1b58395567b459f04e6c5426fd0e3dd383436d51f9ebe238c00592b2a6046fa5b59bac65699c509b3a819da3b5", 0xf2}], 0x8}}, {{&(0x7f0000002dc0)=@llc={0x1a, 0x441, 0x7f, 0x1f, 0x3f, 0x4}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e40)="3e6a98143d48f8f3db8fb83f22748ac3a8de43ea09e148f1dcb8513da0d2cab6158a72d9e87e453c1b68e42d502f2e0b060221053683505452ccd07df9c87cc92576b174e385b36f1644ebf9e3f9ec57e0144328ca266133cd00c893ecc8a40c3cdfeb4ec2da5811fc6428c7159d576e6906d920b3219a9b90ddcee19e00c244026b543d150625878dc168c93c9e15a2a17e5a146ee152f3725d15442a4e1026bd3d16e362e8e43e7de33a4d06178a3d52ea649e610ea46f3201dffb3b6f093570c8", 0xc2}, {&(0x7f0000002f40)="a90edabd77274623bdb12562e708e12f44f4d894fb3de8bcd68e2d1763d1411e03086eee7c3461c51cc21ee598371fb085efbf7ba52db8999151ae617fb847cdcd4c4734de6bf8b4b784b961fbc5fafc31877e9db67d5f04d3759c7bdd9c19ec0fe908ec2087ada5b735b2182660cc96a21996820e", 0x75}, {&(0x7f0000002fc0)="04fad879cf3566cdf309d3e874a61ccd6f53980e273a6f78f8634365f4f468a407e7d8b132ba7f335616e32ffe802f5465faf551e5e924c3221d1ffb165cc55a3c7e7aa83cee14ad280d7b43aa964ab04254488353bbab4e81c29fa7a07aaaf943e3ffa93e6eac27a796dd8c1ade4ca1ede41c8cb1498dade73f53dc4c475db9c9080a0e2570783d55d27046417cddfb4c68aebefa06cd3686db5f1be49997215c1eaade0092c8558d7511f8b4d7d67ff45d8ef1129230a9435df7809226", 0xbe}], 0x3, &(0x7f00000030c0)=[{0xe0, 0x5ab1ebedc22bb0f5, 0x1, "cb2bc6d765d5f2cfd0b232b0060d4dc69112fc235c39540d612e974cccc2ff3b5a335f0473089d3fccfba246b1e100609c51227ecb9e547b1e442619b42dd14589ef404a2536aad69d26a910e9d3070afb85bafd329102a63b78b771ec3fd31d3316dd2eca8fb7f51cc3617b47f29b813c21011e1c1080c4bfd1a2095f3987df44acf58947857dc9412598fd7d6048142890122d0c79bf35c89f3001f0d9e3939a5da3e59ac314ec6739d388db63dd54adcb1546fa20fc77000b6806f83cb804135dfb11387210e745239ad7f0624e15"}, {0x48, 0x39f, 0x1ff, "ffc029381401aaa881e76f0df90124901b1acc08f5f5188d81dbdbbbdf2d1a4602ecc8dcbd4ead7879a83f0bcb079ad00dd59ed418465b"}], 0x128}}], 0x3, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x402000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17, 0xc873ab56e71595f8, r8, 0x0) 20:14:31 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3800000000000000]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 20:14:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00fdff0000000000000000000200000c0000fa07000500729589ef660ece500b68c762555287d547140db99654daeb381ed6e7cac1bebe66acf516465ace02d9aef06bba69a63c6b88e6f91a788618ff318daaf0fc504be04d9b2acc226c420b7a273761c0f07504b7bfdeadb995e7f0f4d8866f18e321fd", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:31 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0xfc00) [ 596.827062][T18866] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:14:32 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) getsockname$packet(r4, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) 20:14:32 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:14:32 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x877148898d674e40, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x4, 0x59555956, 0x5, 0xd17, 0x0, @discrete={0x1, 0x6}}) 20:14:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x10, 0x29, 0x3e}}], 0x10}, 0x0) 20:14:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, 0x0, 0x4) 20:14:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x1c) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x2]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$unix(r3, &(0x7f0000000200)=""/154, 0x9a, 0x100, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 20:14:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="3900000013000900690000e1ffffffffaa0080480d00000046000107000000141900014000000000000003f5dca4de00002d73f556a9500f0c", 0x39}], 0x1) 20:14:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00fdff0000000000000000000200000c0000fa07000500729589ef660ece500b68c762555287d547140db99654daeb381ed6e7cac1bebe66acf516465ace02d9aef06bba69a63c6b88e6f91a788618ff318daaf0fc504be04d9b2acc226c420b7a273761c0f07504b7bfdeadb995e7f0f4d8866f18e321fd", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7fffffff) prctl$PR_GET_KEEPCAPS(0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) r1 = socket(0x5, 0x4, 0xfa) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x4, 0x1000002, 0x0, 0x2}, 0x10) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300), 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x78, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20010}, 0x4000) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)={0x172e, 0x80}) write(r1, &(0x7f0000000040)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0xfffffffffffffe9b) [ 597.512742][T18907] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:14:32 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x7fffffff, 0x3}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 597.617176][T18912] Started in network mode [ 597.621895][T18912] Own node identity e0000001, cluster identity 4711 [ 597.629750][T18912] Enabling of bearer rejected, failed to enable media 20:14:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) [ 597.751921][T18915] Enabling of bearer rejected, failed to enable media 20:14:33 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/15, 0xf}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x10082) 20:14:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f000072eff0)=[{&(0x7f0000000080)="480000001500257f09004b01fcfc8c860a0600000017e006000a2b61d2a1f25b15147344d739b3f9f600e30900000000000000000000ffff5bf109000000ed5e0000008e0d861500", 0x48}], 0x1) 20:14:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 20:14:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr="78f9892847ac8fcd3cb571ff06572d45"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @rand_addr=0xb1}}, [0x9, 0x6, 0x4, 0x5, 0x6, 0x1, 0x9, 0x3, 0x7871ff9c, 0xffffffffffffec30, 0x800, 0x8000, 0x6, 0x9]}, &(0x7f0000000040)=0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0xb9, [], 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/185}, &(0x7f00000003c0)=0x78) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00fdff0000000000000000000200000c0000fa07000500729589ef660ece500b68c762555287d547140db99654daeb381ed6e7cac1bebe66acf516465ace02d9aef06bba69a63c6b88e6f91a788618ff318daaf0fc504be04d9b2acc226c420b7a273761c0f07504b7bfdeadb995e7f0f4d8866f18e321fd", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 598.172101][T18939] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:14:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 20:14:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:14:33 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x1) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x23e, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x28f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x5, 0x0, 0xa461}) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffff01, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x1c) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) sendfile(r0, r2, 0x0, 0x8000fffffffe) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000), &(0x7f0000000040)=0x122) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000080)={0xe7, &(0x7f0000000240)=""/231}) [ 598.395895][T18948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:14:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 20:14:33 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 20:14:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$tun(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0xfefe) sendfile(r2, r3, &(0x7f0000000000)=0xf02, 0xffe) 20:14:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0xfdfd}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 20:14:34 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1, 0x4000) 20:14:34 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x1e3a5a9c9b9e75f7, r2, 0x0) 20:14:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00fdff0000000000000000000200000c0000fa07000500729589ef660ece500b68c762555287d547140db99654daeb381ed6e7cac1bebe66acf516465ace02d9aef06bba69a63c6b88e6f91a788618ff318daaf0fc504be04d9b2acc226c420b7a273761c0f07504b7bfdeadb995e7f0f4d8866f18e321fd", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfc0004) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000080)) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfc0004) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0xa, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x90) 20:14:34 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x90) [ 599.070904][T18985] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:14:34 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) 20:14:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r4 = accept4$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x0) splice(r0, &(0x7f0000000040), r4, &(0x7f0000000180), 0x4, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x0, @rand_addr="095ffd375d5e4f23a574c6cd1515845d", 0x80000001}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @loopback}, 0x18c34ef4}, @in6={0xa, 0x4e21, 0x80000000, @rand_addr="8019510ebe8187b7952bbe3f9db01875", 0x7}, @in6={0xa, 0x4e24, 0x80, @rand_addr="7e1213a7c69be5660ce1cf3f34fc4115", 0x4eb9beb5}, @in={0x2, 0x4e23, @broadcast}], 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="080000001000000006000100392f6079c9b3675af99b2000"]) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl(r6, 0x0, &(0x7f0000000280)="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") 20:14:34 executing program 5: unshare(0x20400) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 20:14:34 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) eventfd2(0xffff, 0x0) 20:14:34 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a55595659bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 20:14:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0xc0800) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e21, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xff}, {0xa, 0x4e22, 0x80000000, @ipv4={[], [], @local}, 0x400}, 0xfff7, [0x7, 0x8001, 0x40, 0x3, 0x4, 0x6, 0xfffffffd, 0x4]}, 0x5c) 20:14:34 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x4}) 20:14:34 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x84, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2fc3b086}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7e03}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8080) 20:14:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7f, 0x22480) connect$rds(r1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x1d, @remote, 0x4e23, 0x0, 'lc\x00', 0x1f, 0x1ff, 0x50}, {@local, 0x4e21, 0x10000, 0x8, 0x8, 0x6}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:34 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a55595659bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) [ 599.965975][T19026] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003 20:14:35 executing program 3: unshare(0x40600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 20:14:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 20:14:35 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a55595659bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 20:14:35 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 20:14:35 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x20280) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:35 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a55595659bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 20:14:35 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x2}}, 0x18) 20:14:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0xdc) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000003c80)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x116, 0x0}}], 0x1, 0x20, 0x0) 20:14:35 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='/dev/mixer\x00', 0xb) 20:14:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80804534, 0x0) 20:14:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50000}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xfffffffe, 0x2, 0x0, 0x8, 0x80, 0x8}, &(0x7f0000000100)=0x20) 20:14:35 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20040, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4c4670037c1e02dd, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1e3a5a9c9b9e75f7, r0, 0x0) 20:14:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x14}], 0x1c4) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/114) 20:14:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0d05605, &(0x7f0000000000)={0xa, 0x0, 0x0, {0x0, 0x32314d4e, 0x8}}) 20:14:36 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x3, 0x0, 0x3, 0x3}}) 20:14:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000140)="5cbce8c5285f911461be710ed4b898bc3ea954bec0b7642f", 0x18}], 0x2) 20:14:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x9, 0x800, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x13, 0x0, 0x0) 20:14:36 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) 20:14:36 executing program 5: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r0, 0x4024700a) 20:14:36 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) 20:14:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x10080c, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000100)="240000001a00050014f9f40700090400dc8145aa00"/43, 0x2b) 20:14:36 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x2, 0x73) dup2(r0, r1) 20:14:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000020000040050000a90000000000fae9fff7ff00000000000001000000000000002560b7adff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48f}]}) 20:14:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:36 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="002000009e953ba7a2dee42b29f71496e217320a3923e6bd1265e474a24bd62289c52d0d000082d223b8cdd70a83d39c3b5a25b8e70fa772fd8fc67c00"], 0x4) sendfile(r0, r0, &(0x7f0000000180), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100), 0x140) 20:14:36 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xe6, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb12000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0f0000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf2509000000100001000c00070004000000300000005000010008000b0073697000140003000000000000000000000000000000000008000500020000000800090002000000080006006f766600080004004e2000000800050002000000080004004e240000"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x4008094) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040)="9e2404312164378e658c5bf4caafd8cecc244603a2b80dd7426c4fc6c0339f7c3812b1bfbc012c7c25f3643e95ec5ff3653d382953e6a4b502f5246306919d394a5d0e5a63dbb718adb1e31359ab0283d42c0808a6dc698138ef8193f966aafdb1b3e6d2bb5b572c0d791a415a95b0f68a46f39d9f28be87de6ec0a9185805b946c888f0866e04f451ada2f167b18eb1ee2b0a149cc7b88dcdbfd2eb2e8b77129b59ab2e570d95390061754271f7788c78f4e01edcca56366b76b8ad8ef4b57ee58446462e6e37", 0xc7) 20:14:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x10000000005, 0x0, 0x1}, 0x33a) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x2077fffb, 0x0, 0x10020000002, 0x0, 0x10}, 0x2c) 20:14:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfd08, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0xa8, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0xf0ffff}}}, 0xa8}}, 0x0) 20:14:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0xffffffffffffff37) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) [ 602.238465][T19144] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. 20:14:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 20:14:37 executing program 2: syz_extract_tcp_res(&(0x7f0000000000), 0x6, 0x565b) [ 602.285095][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 602.300421][T19147] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.310505][T19150] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.366397][T19153] input:  as /devices/virtual/input/input63 [ 602.381289][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:37 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x9, 0x4) 20:14:37 executing program 3: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0), 0x8}) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x23d, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, 0x0, 0xffffff1c, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:14:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x3, 0x3, 0xff) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0xe, 0x0, 0x1000, "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"}, 0x100a, 0x2) 20:14:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) [ 602.705580][T19161] input:  as /devices/virtual/input/input64 20:14:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000140)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x15be000000, 0x20202) 20:14:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001a009b8a14e5f40700090400ff0000000000000500000000", 0x1c) 20:14:38 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="002000009e953ba7a2dee42b29f71496e217320a3923e6bd1265e474a24bd62289c52d0d000082d223b8cdd70a83d39c3b5a25b8e70fa772fd8fc67c00"], 0x4) sendfile(r0, r0, &(0x7f0000000180), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100), 0x140) 20:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 20:14:38 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x134016, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={0x0, 0x6a, 0xec}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'sha512_mb\x00'}}, &(0x7f0000000240)="2bdafaac085daba2dfe4eccf564d366448fc333cb9de20b68d48e122078b8919a27523212c4bac31befabb2ddbf77936e480b92375a1c1b2308d0c8278bf2bc3cb760a63032650edb1ca917e76d769b5e88baa141cad6ecc38cd83baf0fbba51762c6a821dde95f9b52b", &(0x7f00000002c0)="defa4e5dafea890591053db291c57098b7a3d48a5a2d7692ddb8a111cb03e1999056c48aa63d1f61da0ec9220a016989151f153be485bd431bec4c6470328444ef7ff235f11d0b8dcf1718d024ecca50d28e77196c53f30482c2882692c9e9132ee19681852bb3927ccd4c0cf0dba2d3d0bcaa5d2aea958a000da49ada992c1dcdf5762122d2a96c78e03c951e22a9cf1f1ce308255c8e0b2ad310b5b5122bfc92bf65bf7c2c41b069195a668e8a5a11d28111418deb05ced6197ac29b9562d634633a995b554a57773d63d223a6e26a39ce2984565dc705ce6b1d1a87f49d06c5dbc2e4f14410cc05e02842") ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000003c0)={0x2f347589e58e9983, 0x0, [], @bt={0x5, 0x1, 0x0, 0x5, 0x55, 0x8, 0x17, 0x8}}) 20:14:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x82, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000100)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000140)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:38 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0x91, 0xb7, 0x8, 0x14c8, 0x3, 0x9fa6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x1, 0x37, 0xe2, 0x45, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) [ 603.258764][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:38 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000300)={'veth1_to_hsr\x00', @ifru_map}) 20:14:38 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xdf7a, 0x20, 0x1}) 20:14:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000140), 0xfffffefa) 20:14:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x9, 0x9b80) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x840, 0x40000) [ 603.843541][ T3945] usb 6-1: new high-speed USB device number 12 using dummy_hcd 20:14:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x402000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0xe78b) r2 = socket(0x3, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) memfd_create(&(0x7f0000000040)='\x00', 0x4) 20:14:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000140), 0xfffffefa) [ 604.084039][ T3945] usb 6-1: Using ep0 maxpacket: 8 [ 604.203634][ T3945] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 604.212540][ T3945] usb 6-1: config 0 has no interface number 0 [ 604.218963][ T3945] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=9f.a6 [ 604.228202][ T3945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.260155][ T3945] usb 6-1: config 0 descriptor?? [ 604.317972][ T3945] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.72/input/input65 20:14:39 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="002000009e953ba7a2dee42b29f71496e217320a3923e6bd1265e474a24bd62289c52d0d000082d223b8cdd70a83d39c3b5a25b8e70fa772fd8fc67c00"], 0x4) sendfile(r0, r0, &(0x7f0000000180), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100), 0x140) 20:14:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000140), 0xfffffefa) 20:14:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xd4c7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @mcast1, 0x921}, r5}}, 0x48) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x700000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x80000001}}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x40) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0xbd) write(r6, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) rt_sigpending(&(0x7f0000000200), 0x8) [ 604.382315][ T3945] usbtouchscreen 6-1:0.72: usbtouch_probe - usb_submit_urb failed with result: -8 [ 604.515663][ T3945] usbtouchscreen: probe of 6-1:0.72 failed with error -8 [ 604.545551][ T3945] usb 6-1: USB disconnect, device number 12 20:14:39 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) [ 605.063567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 605.070212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 605.076883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 605.083943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 605.091250][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 605.097554][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 605.283345][ T3945] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 605.563570][ T3945] usb 6-1: Using ep0 maxpacket: 8 [ 605.683587][ T3945] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 605.692185][ T3945] usb 6-1: config 0 has no interface number 0 [ 605.699121][ T3945] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=9f.a6 [ 605.708774][ T3945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.764346][ T3945] usb 6-1: config 0 descriptor?? [ 605.808847][ T3945] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.72/input/input66 [ 605.847345][ T3945] usbtouchscreen 6-1:0.72: usbtouch_probe - usb_submit_urb failed with result: -8 [ 605.935191][ T3945] usbtouchscreen: probe of 6-1:0.72 failed with error -8 [ 606.006724][ T3945] usb 6-1: USB disconnect, device number 13 20:14:41 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0x91, 0xb7, 0x8, 0x14c8, 0x3, 0x9fa6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x1, 0x37, 0xe2, 0x45, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 20:14:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:41 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) exit(0x1f) 20:14:41 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="002000009e953ba7a2dee42b29f71496e217320a3923e6bd1265e474a24bd62289c52d0d000082d223b8cdd70a83d39c3b5a25b8e70fa772fd8fc67c00"], 0x4) sendfile(r0, r0, &(0x7f0000000180), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100), 0x140) 20:14:41 executing program 2: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000011c0)={0x9, 0x400, 0x1, 0xb50, 0x9, 0x8, 0xbcab}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000001140)={0x0, 0x0}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r2}, 0xc) r3 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r3) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = socket$inet6(0xa, 0x400200000001, 0x0) r6 = dup(r5) setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000001100)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x10001, 0x8}, 0xc) write$binfmt_elf64(r7, &(0x7f0000001200)=ANY=[@ANYBLOB="7f454c46a62003070600000000000000020000000200000056030000000000004000000000000000cb0200000000000007000000040038000200ff0106006e00040000000600000005000000000000000000000000000000ffff0000000000000400000000000000ffffff7f00000000010000000000000005000000020000002000000000000000a107000000000000060000000000000062b4000000000000050000000000000007000000000000005b71e45f21b2e2fcbb6f68690ce29a6be3181312abb8aeb241868a54519f90978d45849cf708cf9732c045b088f256d7f245141ebe1f378fe6f0b5c35722e3f20b91345b1a44c4b01d605ae2bb106cf840e4c68ffa3711c52a8cf5adfa819fcc7c207b8df8898740f0e7c8eacb14e6da51b18aa78cc01850eff11f835e63e6c92c138e060cc87b65a422ae41671eaafa90e88a67c95d4b0910225c62be0c965db711847738d76a2c43afb9bb9a49a8aa1a6bda22d24a29525c3616ecbb6a1456179cf637f5db78faf4cac728759e7d15f7432672968fe2cb9d3ba558516b83e850f0babe3a56cf0f5e188f2f9949a89175e5f975f5c138de215a04b7e3c900a09e322a9a806c232885f7aabf1e7cc86ea6686560be34f3a4edf63439cfa9d3de48ddeded062c20c0a566abec59a5378371c4becef1a1b0a33273cb1bebf1d7c5700ff4926a7295b6d972066a2bdf08ab6a73fc6e5cf38c379b86ee61b1ad273a586a7ad59df8816aaeab781448ac3773d5d19f77c3dcae6e7f3204702aaaa446aac026d3ec7d5da0c36efa9f9238346832269fcad6da4035ab9257607d695774792177625875b3bf0cc9680f90fb1b147b37457c0043341a58470173cece1497bc2bb7f29b85b94760069ab40f4978fea116c7de12ea0ff89ebe19b74b34757f5297e0cc3d0a9817ab100ac55d3b174f759f23df9d8582cd8a3efd912fd2de03cbeda0864ea81d11e03b82424a458283617054a639ee6ee5a7a5e9da9335b1c75f480922443746b76b7faa2d3f35130c646aa0501c5b654046485c2cf8cce980c3777743a6a18c5df1aec0bfbc7a10a3c44bd2068eab4437739a54bc3ca0f6641d4ed21e213ef048a704effb434c180a536c7d268d4babc3f038ffcab4d843c4b8596e967f9374e12fc5e38c638182978bbedfe4f3240d4391793252c1762a3ffa6682b90f9a8a5e9506741270ea6197583fb172996a3bdd4b017762902fc79735f6c43e05878425022032cc88b5a8654846d343b3b4d5a8387f89f817f613a412301dd4a78d50b31b4cff80d5f52f0667ddffaa298813a9390772c9d1f398ce60f9165bb708b1c67d44f998dad77cf86ea51072d077fa7a47f6273ead5e9c9a1f58a84a81b2e963af6fcd5e78104ba80b86bba0b12703e4f310d8fb99c21d64fc1e29daa6ec6ac358d577f676a15e5f65bded6d05de7fadb8f665a389bd1bafd5eee65372b1d3c92f1e5a72272cc2eccc83ae915315e2dd3fdb3ebfa5172a60e841598352ad0c502a9c245970eb5cb588762860373037a654fae1ce7e3b46f2a680514a5789dae6b598e45d31c92294b2f6d5dead9bd226e5836726c09824b902d3154f6b1bd5e988c416c00fc7a29d69d46e871bb4f5035807915d762dfb53266f19bfc110549917331e1c314b5f45cbb1faf3aee8c2fc4673ac7dea2d6aa827df3f571fdc481f73a11703c5ec081306a576169fec23090e7eb7c866ef6e38242598abf78abe5a80e1aa3788255d3eb1e737ba3590aa8721c9261893ee8f9d40eb52f8aa4a3eaef4fed53537b012930320fec76028b9f4025666a6c854a5294d05433b1523f05fe83a39afe90c407d202a941f42e1967b6e18f8eda8d8f42134d6a5f3c899cc4e5de9097df4b8238fcb889176deb7ee529986c81d25596b1f2c00bace01c38d285414ba9e498fde0b3e7886dff59cc04e810a4248b1772d3fe38514f71d9de3792ad57eab72d8a378267ffaa29a16dfc521888fca99538c5bf6d86aee1a8f9524c93b94f5def9c4871205540de3ce54e6134986df935b8b59ac4d6b098e39465703bb861d674bc4c2e8d952d9c15aba9421ea04a7338c843d0acae47c9e2411252a404b3f7e0f55b77ef8694b5fcd33f7d90adac22e9bca6f6ecebcde488644c6d3214afc0ec2f4f77a3f957c81bef478b567c7a628d07f728d1a7cb5cf11ee3738fcee417e444d13cf5d7814b3109d37561079e60e85a660d5c87415d12b4445ea3c7771fef381ffa8ef76571acc7dc05e35e5a240121c20adf4633762497b4628117d3ebe83b9d1dc1a6dc0ad8071451eb9b7435b653fb4f925ccf891c965f06ddc7c6a757363fac29217680cff7b2255689424c29d388bba7f034c50a767096146e2ffb6f50814d21f38a11e5135e91faa0a133025eb6a07634fab96beb50a7ef7a7b8a9b5f03e50822c18a5605f2bdb6ae146b58c05c796fd28bdf59643435837ab136fd62aed127852ff3093276a2cbc9dc16c79627c2698b72a5cb4674b2bf8270b0e8de0962168c26ac60b828a39809e342a786b1cd6ba97b559c9de6719cc6a8c9331e4851803311ca1f21bfcb5f0c45531ed7d71396809709e726b1e190048010c6bc358480c83a9a67cb2660e11550a5f8d91c1eafbe821a2597a72be346a1c5352a51f40abbbc3601c3d7e9d8fb7459264ad06d7205583e39de05a805769a1509be25fde8e440ed92745d40866ca2442699597d06885e001d94ed80c5fe689dce62c04134bf6e1043efa00902a630759211435148ced3a65ab7a8afed94854a20f302ae38e434547570d3614c13f592fd7f5d4c3657949b588da8a005a16541e58042b4690a0c3d4d45c65cce8024467fb3121c57c666d8ec5b8f0a6c0b17cba300174817aa69bf9b19a7a94b1d8ba6799e78de48c7250a40d638645bf9d067fee3b53f529945810135eff521e749e19176fee4ffc80cf40b317463d012f426487a4fc69a2b3683dd2694528f4c3769cd7da322604ebcb2fea428688580e64cd53850c0180776adf96d130d986da93ecd2c4323abd618ad54f53767a8bd1368adf777c645034089481d4366bf93e7726f7fcb82752a416391e6d30117fd8c818c3683d8746c0a0ac7f99ac0df101269bf906daf87783592b808523110d68228b12f3f14f824c9abad7f19944b61da3b9e1c32a4faf86d40fad477b12912bb5cc92d1b866dbcd864931ab2ff2957ed9f157e3beab49ddf06a3bdebeabaee7b8396f0f0340fe1e85bfc4afd79bb0d3e2a1a69b09d8d1263c5aaebb1c713c69816f58d7371010a417b103383ef02705539284b6d2511ee789ef5456b737fd32e37444048167a2fbb063671d4402dbc29cbcc703cb9521cd101da41d953d4f00d1047d6dfc9ae96fb2d6b2757c07278c38dd386f5cc69835d133befdebfd44136ec4d057dc366bd9037df14b09663fe003230851b1e46dc0d27bff9fee36b3fa4be2ea4f45c4aafc4b93ec857c42678a3756a9855338706863f926f158e0780e557841194786b33be37568fe22b3c953fb863819cb11a40530379a3271f1ad576d3f9b41a2b894be60fc55824fe2dcb66d1e622aa120ebbbce609709b88fd81e5bbf1e5bf70aa12be22f643c6fe80fb540da4da424902d388430394fadb0e30576f1d1d07e971b176d9368e4d0d9b1959958642c9b9c895a5aa08b8d3999077b24ab97affc62f1e1bb5e4cb9239f394199dea665cafece0f8a761b58c404b4577dcdbe3b85463bbdc6c1b81fb1461609686aeb0a51880d3913c03938bb3ba52d0c27198c65855bf145e492bd500971e32c8533bfa7d9b63a19b69437890a9582458ac804bb5498d6fea4e544c8e2f9299622bd1c7549b0762b35d6730ed550cb578bdbb586d3b0da48f9ca56cbdebb0cfb273d745304e83e1133c9de79ae84ffdddbfeb47e1b45ad99b10cd09d6a2f257e643c5469f55daaf77f698593cfbaa5ce31879fb2e8e18b684ef94417aa91feba54c5f9546f8efa5663b5884d7d51314153cd3ff4a6dcc8f35c21d39364ce86be58b5fb202e1ef0271bdae4f7610566622c2a1d93766910a38b4cbb80ce18e06d7c8f565a4640e24cf73d0a65d186f17a09eeaaa5c91c53ce4e26f2f375d896f82468c714566c7818757dd090eeb09779c042221a622c24ea17f87829e241f8bf91ddebdd836ce5e0993b49f54d3b5457708ab52749d5679d81d4d93a64cd323f0c8e949add22a9f4a2c17a8217e2cb2d148fb9b75fb9634cddab527a356289a98ffb377c1e09810e06f7b65310f129d0cc7f19abbedeebbc027fd345b88e8823e62caf99ebdb18299850fa0751657a0768b3811913f1a83ee405e6c7fa5af2fb78b6dad8235044858e3f522590b8e677fc6d0d8008aa7270bf61d83b16d14cb8796c985198ab0cff8e8e93c441bb3bc65a9958b4b4ec7eec7c9d2ac7d4187285c457cc3e7e3238703b95044a59ec739f8cd78761fc712212b133adf37487c6cbc8ad123ad201a184089dd4a3d77a4f88c9f5e75f2f6eda0b81594eaa428349f0deeddebfa4bc87c576a53112305e66a45741da4ecf6528432c535ee82e8fd533fed655b3f5595fdeb9da98deeebc4b00fd4713dad69be86bacc273c198214a35191ee141c498cd238615668e20626eb1c21b60bdd70f4f66a0c447bfc5f31eae048c27f361f9f8a1513a08dedb3ad313ecebe80332c2d9bd0edd18dd017afc9dc58529cbc98a1cde145813bb18c6b17ed72d3cae88fd983e50e50a30e09cb40eb470c1116846bba5399eda86c016af27b62eeab4964645be0c5f2cfef46639a002ae024d125fe4fe560131fa8179e6a40c6409b41f0a9a866a7facaedb58a7c865862bf6eff6c885c739802a45a6c8199908a2b9179af5fda6db3138715d38a73ec515167d1f95f5e66651afb0a9e6761bfb805528b56012113125002a11cbe234ad9b208eb2b11f8137b8306e1f0ade21a97b1ed04928ae04abce0db685b46f68c55b6a474eb45ee87d536272309b0b783b39446ee983e41cff3e48cf1822ff8faef9e429bcf0e8a1e9b995fb1a4a8f39b9b371c8c99779762a746dab0d79dfa18085c526dbb67c7f895f30c0cca8102d7f3c88842dd7fa8966d2481da26f41790faa5bb80a0c9f3606391a210a6d808dce1b7ff05302be240de39215483a955466c7d68faf70de0f06667d636f6ea25483c7163eba9dc9033cc92c5474745e5be73d2c05648f29c6bca43d67c1cfa336720633a0616787e79f7497fb925e428632593a65249a838c39a073f4ad249240967aca02fb0c1192102d25c7222eabcde739ff8761269ba7157b7eed9eb158b9bb0e9892b1c463522e2b2db735ebd38c34e34d2071cd314cd84fa587060e7e6550248bd8215a35b8362895e6bb2079f956fbde00f5aefa8a4e116fa636bd794069fcc84951001d3c00d1e824d04d49658e6da9ca28a750540e086229f70d7627b55b5b610e46623ef34af7520b02c12f0fc0012151505d0ff0f5f2ab8c53325cdacc826b0770ad637ec5ff0e3fb9720cb4c17d79e8f554f82cebbecde95b26803c6af998696d7ebb28e468f85f0c34277e4e91a05b99b22116f7e2f206f34c8c9896c62a9da3e00fd1ed85d91bd08414f7846e7a5c06a025c22634adaaba157071e6f081aae3a6e3b83794d92d4e264143e48c2ae7f96213c40baf9eaec73b10d69b590a22e7911b54c357d7946616dee5b1fd8f5a378c9cd35970d4804e84db2eedfbe8156f740d7e11c103c0ad4d447b66a1ab6e17409b09e6d83fcc313b7579ab24946008bf2bb04e3c807218f127dc8a8b7afb718155f53040082eae6ff2e0ac3df2f2d6acfc221cbfe8de67763c8320a2aa156d2fdf9155bc28ed167bfd69532feaa5366c5c4e39c50bce8ce2e055bef63f5bf011971c14c01959cef22cc0258a4611616b7e6c9a97cc46c9fda7050290d54fe5ec071b58a435a17039b36307d3be77552319f35f158462476c5b37f34ed0373cd9e648ec0e90469b5d532f7774c27d1a2aad08553b7de8400e7b374775851ad60c3544d278a33f8dda8e182699b388e9963675cfd34db6a08e82af2914f303fd0fe4947da10aa1b146f752e71f37bdc5710b8437df65f137088e3d699b80c8ae80f9cb13abd54fed0fa6ba6c5453647de1210dbdc9d5"], 0x10b0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000140), 0xfffffefa) 20:14:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x100, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r3) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000200)={0x5, 0x0, [{0x4, 0x0, 0x7}, {0x3, 0x0, 0xe6b9}, {0x0, 0x0, 0x9}, {0xffffffff, 0x0, 0x7fff}, {0x5, 0x0, 0x9}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240008001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0xffffffffffffff71) 20:14:41 executing program 2: r0 = add_key$keyring(&(0x7f0000001a80)='keyring\x00', &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000001b00)='\x00', 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="f04684ecffe21c5e3191e2632c542a5d40480815037f931301b172b5322cf7fa97b79d60562d35d1f045ac5e3dccea1ebbbd2383260416310f110f26c63c4cfae02745f11d17b5acb346e28f2f5f0816d63c2170d7bda6cd0f2b3ebd2e5c25a57ba785cf1617bd1e6f399a190c4759384ec11c50d56871bd943355ef1eb3a0cd4719157cbfbb4cac2699dbfc846a12e1153822732b6563bafde5c09b3ad19919af65f97e733d688b2f2225564f01cc6cba04afa0c6150f834ccd73f00c905dc3ae14f67b7ffb8dc0d3ab93ebcbc8a00b31e18dd9ceb0e5cb6167ebc1370e293586d0448433cd204fa5e1fe", 0xeb, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800020000000000", 0x24) [ 606.893435][ T3945] usb 6-1: new high-speed USB device number 14 using dummy_hcd 20:14:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001700)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0bb10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa8bc2d26fc4d3cab145e3a2f1af344471cf5b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b03000000000000000000"], 0x12e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000200)=""/231) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001a005f0014f9f40700d20e31858d324f2c004be2089c8145aa00000000000000c766ae35e131ff801655b35db34df44e966fa826f0e7c6e12c933357b2dec0c535cb91d704e98df7b26c3d1b165f68f08d61a7530e497a86a97668df1d05f1c12aa127f9e4796ee8a5919d8e2659f50093ff406d2457ee3090942c7132ca9df8bd2fcf9934c47a8be1b8fd2c8529e97b76aef6870c594ccc1c56635fcd5c8290624aafccea2aad78f61a474fa034de814b73e9f0a5d00d1d079117849fb39d642012c26e3f4feb9652a0281fce60", 0xd2) 20:14:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ffafef4420000000000300000c0002000000000041b7608f0c0004000000000000000000"], 0x2c}}, 0x0) 20:14:42 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 607.133859][ T3945] usb 6-1: Using ep0 maxpacket: 8 [ 607.146842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 607.153542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 607.159979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 607.166676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 607.235597][ T4123] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 607.264486][ T4123] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on sz1 [ 607.275147][T19289] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.284273][ T3945] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 607.294036][ T3945] usb 6-1: config 0 has no interface number 0 [ 607.300367][ T3945] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=9f.a6 [ 607.305707][T19289] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 607.310231][ T3945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.355067][ T4123] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 607.377461][T19289] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.390293][ T4123] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on sz1 [ 607.405005][T19294] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 607.436524][ T3945] usb 6-1: config 0 descriptor?? [ 607.494847][ T3945] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.72/input/input67 [ 607.577553][ T3945] usbtouchscreen 6-1:0.72: usbtouch_probe - usb_submit_urb failed with result: -8 [ 607.786450][ T3945] usbtouchscreen: probe of 6-1:0.72 failed with error -8 [ 607.814093][ T3945] usb 6-1: USB disconnect, device number 14 20:14:43 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0x91, 0xb7, 0x8, 0x14c8, 0x3, 0x9fa6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x1, 0x37, 0xe2, 0x45, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 20:14:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/47, 0x2f) getdents(r0, &(0x7f0000000200)=""/46, 0x2e) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000040)={0x81, "ba7af5e3ec6aa69ec071afc41721a6dae75651ab776807f1162cc482559523eebe3be44c30ad99c3a9a4c475f90b7939438fb08dd90cb82b55e217debf91e261bf9465af7b209ba932b27c7799c9613a8bc58dad2a570303ee132245fdef536137fa6eed3fbb67c71ab9719027080caaa7ec8bb30dfbe25d91d1875db51adde134"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:43 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x1400) signalfd4(r1, &(0x7f0000000140)={0x8}, 0x8, 0x80800) 20:14:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xe, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000100)={0x4, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x400200000001, 0x0) r5 = dup(r4) setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000040)={0x2, 0x7fff}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0xc2) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000200)=0x8) 20:14:43 executing program 3: unshare(0x28020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x14}, 0xc3}}, 0x0) ioctl$PPPIOCGNPMODE(r0, 0x4010744d, &(0x7f0000000180)) 20:14:43 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x84ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 20:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x02\xac\x0f\x00\x01\xac\x0f\x00ype\x00'}]}, 0x24}}, 0x0) 20:14:43 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) 20:14:43 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) accept4(r0, 0x0, &(0x7f0000000100), 0x1400) 20:14:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe07002b0000000000ff0711000000450001070000001419001a000b00020004000100550e00"/57, 0x39}], 0x1) [ 608.593344][ T3382] usb 6-1: new high-speed USB device number 15 using dummy_hcd 20:14:43 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) [ 608.643941][T19337] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 608.655081][T19337] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 20:14:43 executing program 0: set_tid_address(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/94) [ 608.833422][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 608.953800][ T3382] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 608.962115][ T3382] usb 6-1: config 0 has no interface number 0 [ 608.968729][ T3382] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=9f.a6 [ 608.978380][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.988119][ T3382] usb 6-1: config 0 descriptor?? [ 609.038842][ T3382] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.72/input/input68 [ 609.055606][ T3382] usbtouchscreen 6-1:0.72: usbtouch_probe - usb_submit_urb failed with result: -8 [ 609.145615][ T3382] usbtouchscreen: probe of 6-1:0.72 failed with error -8 [ 609.241274][ T3945] usb 6-1: USB disconnect, device number 15 20:14:44 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0x91, 0xb7, 0x8, 0x14c8, 0x3, 0x9fa6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x1, 0x37, 0xe2, 0x45, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 20:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1a0}]}) 20:14:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x58, 0x6, 0x0, @dev, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @fastopen={0x22, 0x3, "9f"}, @mptcp=@remove_addr={0x1e, 0x25, 0x0, 0x100, "0bb0eaee79cd3e1ff62a69e63df6591d5733e13bf8fab2d8e1bfbd2d96a422a6fc1a"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="e5fffffff1ffffff23001800020003000000000000e3e14400000000000000f4e4b6a0f4720d58f5fe0000c400000900"/58], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', r6}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x17}, @rand_addr="9088be465c3bd0bd9d3b53dc97897cdf", @local, 0x3f, 0x6, 0xffff, 0x100, 0x6, 0x100000, r7}) 20:14:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r1) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r4]}) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:44 executing program 0: set_tid_address(&(0x7f0000000000)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) 20:14:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr="78f9892847ac8fcd3cb571ff06572d45"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000000)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000003c0)={r8, 0x80}, &(0x7f0000000400)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr="78f9892847ac8fcd3cb571ff06572d45"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={r10}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={r10, 0x80, "a7303a45bde4bcc8259529b3735c9d88e1a01c1eb75c3bef5c7b127409d1a88b01b5adf47886f18297698bca034d6953b58b1c9026352e69cebf5cfd036edf304070e5139415e6ea827da66cb4d62470a1762a4e5849938a2774ee1305f781536feea2e846f3b522eb0a53ab01f0b44800e3b00f138575d112ca36630537cb71"}, &(0x7f0000000380)=0x88) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r11, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x7, @remote, 0x922}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @remote, 0x7ff}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x88) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01002b06", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r12, @in6={{0xa, 0x4e21, 0x0, @rand_addr="44f437f4b1e9754ca09c84756cfd566e", 0xb9}}, 0x3, 0x5, 0x10000, 0x5, 0x10}, &(0x7f0000000040)=0x98) 20:14:44 executing program 0: set_tid_address(&(0x7f0000000000)) 20:14:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000091}]}) [ 609.915876][T19360] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.954071][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:14:45 executing program 0: set_tid_address(0x0) [ 610.095981][T19360] net_ratelimit: 7 callbacks suppressed [ 610.096094][T19360] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 610.116699][ T3382] usb 6-1: new high-speed USB device number 16 using dummy_hcd 20:14:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 610.173979][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:14:45 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x47, &(0x7f0000000680)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x11, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x11, 0x0, [], "d3c904fd8888ac5f07"}}}}}}, 0x0) 20:14:45 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f00000000c0)={0x7, 0x3, 0x3, 0x0, 0xfffffff9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r4, r5, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r6 = add_key$keyring(&(0x7f0000001a80)='keyring\x00', &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000001b00)='\x00', 0x0) keyctl$get_persistent(0x16, r4, r6) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-ce\x00'}, 0x58) [ 610.262642][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.377544][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 610.515672][ T3382] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 610.524221][ T3382] usb 6-1: config 0 has no interface number 0 [ 610.530543][ T3382] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=9f.a6 [ 610.539989][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.578598][ T3382] usb 6-1: config 0 descriptor?? [ 610.628660][ T3382] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.72/input/input69 [ 610.655779][ T3382] usbtouchscreen 6-1:0.72: usbtouch_probe - usb_submit_urb failed with result: -8 [ 610.737035][ T3382] usbtouchscreen: probe of 6-1:0.72 failed with error -8 [ 610.841936][ T3382] usb 6-1: USB disconnect, device number 16 20:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 20:14:46 executing program 0: unshare(0x20600) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000f1, 0x0, 0x0, 0x0) 20:14:46 executing program 3: r0 = getpid() r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000000)=[{0x4, 0xd78}, {0x4}], 0x2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:14:46 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffffffff, 0xa8dd73ec3fb47f43) r1 = geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000001700)=ANY=[@ANYRES32], 0x1) r5 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r5) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r5, r6, 0x0, 0x8000fffffffe) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x1ff, 0x8a, r7, 0x0, r8, 0x0, 0x2, 0x3ff}) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) r9 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000180)={@host}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x0, {0x80, 0x3, 0x5}, 0x30, r1, r10, 0x9, 0x9, 0x8, 0xd3cd, 0x7fffffff, 0x5, 0x401, 0x39198, 0x2, 0x7, 0x9, 0x200, 0x7, 0xfffffffffffffe01, 0x8}}, 0xa0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 20:14:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000100)={0x8, 0x70, 0xc0, 0x7f, 0x2, 0x6, 0x0, 0x400, 0x90204, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x2, 0x3}, 0xc02, 0xfffffffffffffbff, 0x9, 0x0, 0x3ff, 0x2, 0xf405}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 20:14:46 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x4, 0x200, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x0, 0x0, 0x4b564d02], [0x3a]}) 20:14:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6vti={{0xc, 0x1, 'ip6vti\x00'}, {0x4}}}]}, 0x34}}, 0x0) 20:14:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000100)=0x5, 0x1ff, 0x3) 20:14:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname(r3, &(0x7f0000000180)=@can, &(0x7f0000000100)=0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000400)=@ipv6_delrule={0x0, 0x21, 0x410, 0x70bd28, 0x25dfdbfd, {0xa, 0x10, 0x80, 0x9, 0x2a, 0x0, 0x0, 0x4, 0x10000}}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:46 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 20:14:46 executing program 1: pipe(&(0x7f0000000300)) pipe(&(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/40) 20:14:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 20:14:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 20:14:47 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/77, 0x4d}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001540)={@loopback, @empty, @loopback, 0x2, 0x200, 0x1000, 0x0, 0x0, 0x40020130, r2}) 20:14:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xe472cb821357afdc, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', '/dev/uhid\x00'}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x1eb) 20:14:47 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1, 0x0) creat(&(0x7f0000000280)='./file0/bus\x00', 0x0) 20:14:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 20:14:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'ip6_vti0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)="87", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{0x0, 0x2}, {&(0x7f0000001940)="9c", 0x1}], 0x2}}], 0x2, 0x0) [ 612.184431][ T3945] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 612.247275][ T3945] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on sz1 20:14:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x701, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0xf, [@rand_addr=0xffffffff]}]}}}]}, 0x3c}}, 0x0) [ 612.320370][ T3945] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 20:14:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 612.381362][ T3945] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on sz1 20:14:47 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) msgget(0x1, 0x100) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 20:14:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x4, {0x1000000000000001, @raw_data="883d24b91e57e886fca466088baf5f344209b2ad8ff2fc646b40af17a5d6edc8b93b458ee535075ab6255500490203eeaf583bc7a60e265aabd7e9ecf30a465123c224323d7b491b3766360dc1b9bd5fe8f1de70928c443c0db7e303df5f9bb3e419088730b48f7fea5cf3ecae85e2191e973262f5b50eb5cc802f9abd23442b2dc48bd1aedeb8c94f012b8e1cab645f9797e4ba66c8b015291899a8e028010013acc1d1425afd2c36bdf7846a0f4e9b5817031598f56733e9190211c7f7213d3e1efa442647df93"}}) [ 612.466838][T19477] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 612.478156][T19477] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 20:14:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r2, &(0x7f0000000180)="00010000000000000007000100000220060001004be208dc8145aa000000000000007890915bad98bac93dfd4c749c6aa074edb343ade83a276c63c3dd2535696999f96560eff6f952e8c5a800000000000000", 0x359e1b566deda642) 20:14:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ppoll(&(0x7f0000000340)=[{r0}], 0x1, 0x0, 0x0, 0x0) 20:14:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 612.699726][T19491] vivid-002: disconnect 20:14:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x41, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) 20:14:47 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) [ 612.736435][T19490] vivid-002: reconnect 20:14:47 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000014, 0x0, 0xfffffe13) [ 612.776498][T19491] vivid-002: disconnect [ 612.825832][T19490] vivid-002: reconnect 20:14:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:14:48 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_SNOOPING={0x8}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x0, 0x40, {0x55, 0x8, 0x6, {0x400, 0x400}, {0x2, 0x8651}, @rumble={0x370b, 0x1}}, {0x54, 0x6, 0x9, {0x8, 0x1}, {0x3, 0x201}, @rumble={0x9, 0x4}}}) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:48 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f902, 0x0, [], @string=0x0}}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00\x96C\xc2:\xf4>~Uph\x9aq\x85\xac\xdaLi\xe4J\x94\xe6\x81d\xc9g+\xba\x03\x00\x00\x00\x00\x00\x00\x00\xbb\xff\xef+\x96>\xadX\x89t\x1d\xf4\xd2\xf9\xb5YS\x05\xdd*id\xb91/\x04\x13\xe4\xdeI\xbd\xc0\xef]\xd8m\xa9\xc7(~\x93F\x89\xb1\x8b#]\x8d\xd7\xca\xca\xab\\\xebo\x17c\x91R\x18\x8fz\x93Y\xa0\x9cP\xef!p\x1d\x12\xfc\xee\xbb\x96\xf5#Ki]>\xf1J\xecS\x14\x15T\xa4\x8b\b\xa6\x1a\xa9P\xc2\x81\xe9Y\xc3\x12Ggr0d\xe9\xbbK.\x9b') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 20:14:48 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f00000000c0), 0x74, 0x0) [ 613.148102][T19517] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 20:14:48 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0xef862ecb672a93e5) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r4, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="38cc9647d248978a9e1f08427d5011c00c7fcc78f53b312e386e501a586d3c51b68e192a0d965ff240ee267db156f9066e23e0357e795da084a3be293f5a997992c75fe08a685ef4a18863ce6717369603653a32b410272f8f75d03b89619172f0459536ba4c014d6fc1c0ebd17bee", 0x6f}, {&(0x7f0000000180)="8461b78f256ca661b8cadab97e0cbd3816f2ffd83661b376f02a4568ee9c3356a975b5181887eaf90acaabb0a7fbb6eaa29c179dbb7d37a6e0c2c92f08e4d9f74065fe8126e4bd7872bdd4c650dc9bdf5a670ed68d2b64181f1de3e8a989ab008b9d8d5eab6df1517fb86fe5c17d475cfbe01d5b92ffb96236ac16b111ffba0f1b20548abac5b2c70db884f814e8fa4fbc618afa20bc311b820519d2055f866cbf15b92453c2eec97250d77d7c8b9fa406b09f3347557b2bdeaa7968e6ee3daf0ae3afb006c82a93a1da5055c1", 0xcd}, {&(0x7f0000000280)="20d83af21114ca3e9dad96abea072eadb7ad41cf63bdef4ed8fe7ceb37c188b33955e43161d5ea5b3fbb641bcd87cf9814101562afbe2abc73b68a272e216b159106b280723b6f0bc96388cc76547353c3540136b035ec84980f8ad52080fa1c81b14ee86f7d80a5533a25bd73ccbdc0ee1727ec106b8ec46352ed71b0260df15072e266b6b870999a59d3889894aceb02a4e9dbf73e15dd53000fcae862f68cf668ff55f398d65fbd70624a07cef31d8b2c06b1f24d68d490fc66", 0xbb}, {&(0x7f0000000340)="c60a284fc674d7d41186fe80eb6ff2012c54205c6e84559fb38212456655e6cd416f7e38b7aa2178248801e4cb1c0cffd2a6012d9358f07854977d8a5544cf90db3fa6119f56c111c08457545495a208c71f92e4d083ce226dec42d0df2f1a22d3c5f489f6d85902ddf790554f8eac4440552b2f9116609a433b759728a06d8315e8c221a67555efad503925", 0x8c}, {&(0x7f0000000040)="9d454b4b10801021f7de2d3408bd2146091cd2344dbc602b51bd50520026c16c23e6354e36c27618fef250e0dd", 0x2d}, {&(0x7f0000000400)="631152f6a864283a802d4fb035cddb73b8f39252080107d25d1a28637512529555cdc3dd027d1f3dabb406079868fe", 0x2f}, {&(0x7f0000000440)="9f01ab8118dcdd91e12968210945beb995baa3cac12f29f34896592c6f2c7883077027d0ec59954c8343d3473b4b8de186bc2f33fbb0bab8d2a0f62e10df92cecd0c0c97631712c9a44070c98c9a535bce861f892658aadb8b43943b674389a0f65ffa9b5a1c73d8ce3cdb4c697e9c5783811ddff13f003deff15ca2e48fa18f92daaeae4a9a48cb504868d3cc1a4be84706ca62d86bdbc522e5ef000f8faa3320cc72d1ad3d7f834e2b8a7bce7f4558652485039225ec36", 0xb8}, {&(0x7f0000000500)="b4a72875b6d380761d201e1aa0954fcfec5d82f5d61f8a3368234b0359320b45f8693efffb25620c0b13e7643ca0063a5cfcfcdece8599058974434168e38beb4289a608a99117df382d542a2f4d15926e887e61383a515094f0955d83e51b4f2594d6027ea7ade18fdb2cbeed579b83cadd953969d479528d87a5c92ee7dd175be0d0f878e42ba50b2a39c6980bd3afc01672d51fc4350b618bfbee718614a3bbd15b8d71e7fb8cd07b73c07e6b88aadcdaf30a94c945256f732f2efad74e284a3e6baaf178e0efa13490", 0xcb}, {&(0x7f0000000600)="3558b189b2d1100dcb9259cfc2bfd0cc341385e0cbedf1ea7499235251c07243ac3b34cf9f6ae9d9316bc993befe03daa27f1f1ed74665eb49f508d2b492d8784cbafacfcafc3aab5d764f7722fb1231", 0x50}, {&(0x7f0000000680)="98a1c24a024e1b49c8bd8f3ecfc934e565ec54e8be460982600394b576c613bf8a99422a1a951915ab6c226f9cec490d8892c3dbdeded33f637f117a824e3b53daac6496867013c7adee88ad63c2b70655f8e7557550110ac95b590d9e", 0x5d}], 0xa) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) 20:14:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf}}) 20:14:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') close(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 20:14:48 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x7, "5ad4ef4609881a0314c504adfd"}, 0xffffffffffffff30, 0x7) 20:14:48 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix_mp}) 20:14:48 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_SNOOPING={0x8}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x20000000000000, 0x700, 0x0, 0x0, 0xffffffae}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x32}]}, &(0x7f0000003ff6)='G\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:14:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2c000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000100)={0xffff6916, 0x5, 0x2, 'queue0\x00', 0x5}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:48 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000100)="af97ffac92e02e9437a1cc513f9e896b3b6b0f76e5207e346b20940c13470f201f111a8d654feea84e6919164fbccffffca42cf65753de66e807a7174ae90a91f63a577dad4406f7f4e5dfde1fceb77dc31e268d4db147f18e3bee2e791b9666b7ececee889f933d942d0aeaf67f1afed3e3ba3c3e71c9cd6eaf2e0d490b6fd92209143f92d8", 0x86) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x34a18658aaf6df77, r4, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000001, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000040)) 20:14:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 20:14:48 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix_mp}) [ 614.007305][T19575] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 20:14:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x20000000000000, 0x700, 0x0, 0x0, 0xffffffae}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x32}]}, &(0x7f0000003ff6)='G\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:14:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix_mp}) 20:14:49 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='\x1bd\x04\x00mm7\x8bi#\x00', 0x9, 0x734400) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x50, r0, 0x0) 20:14:49 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2909302060402fe000001000009003900090035000c021600000019000b4023dc0b00000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4f7826de", 0x55}], 0x1}, 0x0) 20:14:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:49 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018008200140000c6e814dac6ea608eb789b610166d979575406524653fb29a8e37148e98281765e4344aba14cd7ea8a6f0ed665e629828ba6c30165d4a2a1e0a00000000000000001563d9563f7adb298a5857095cf604fbeb6d8ec594386d08d76b5091db608d05c81241c522e2b106e05d61d98823c0eff83c020798c33434c0829652329979f9925b0a4332b00249423ee39bdeb7e917", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000240007050000006ea51b59a2bb660000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000002c00010708000000000800002001ffff", @ANYRES32=r4, @ANYBLOB="0000000000000000030000000c0001007463696e6465780044000200400006003c000100eac44804000400eeffffffffffffff0000000000000000000000000003000000000000cef577d3700f474b000000000076ab85260000000089067a896a92423033a063230363e9a216cc01a0195a0da69a7a282c1adfc9c977620448b9a110ad11a8b6ee3edcf5c83101c75fa14d165cfed7cb2d2092aba91533d629ebb32e30dad2e800ed9a72ac63234597a7c427a67de45d0ec6bf0b9400a2d2822677d993a065eace4fa7d232abc3d0bce00a10ea78b40750"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 20:14:49 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_SNOOPING={0x8}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:49 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1) 20:14:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x20000000000000, 0x700, 0x0, 0x0, 0xffffffae}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x32}]}, &(0x7f0000003ff6)='G\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:14:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0xfffffffffffffe6d) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix_mp}) 20:14:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x4b564d00}]}) [ 614.637966][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000200)}, 0x20) [ 614.713875][T19620] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 614.736239][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x20000000000000, 0x700, 0x0, 0x0, 0xffffffae}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x32}]}, &(0x7f0000003ff6)='G\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:14:49 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0xd511c0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xdb75, 0x8014, 0xffffff00, 0x9, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r2, 0xe8, 0x4, [0x3, 0x9, 0x6, 0x1]}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x20000000000002a5, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff000000004704000000ffffffce400300000000006504000001ed00007c000000000000005d44000000000000630a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef168f6e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd6ff01bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2caa55062b17c58c59bc3ffb5d8ee3d8dfa2b78ad00f5c6d6e0ad7f1f89d5cb3f0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc206138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf4172cfb11bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:14:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff8e, 0x20000fed, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='yeah\x00', 0x5) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x143) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1520, 0x11, 0x0, 0x27) 20:14:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='\x00'], &(0x7f0000000200)) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:50 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_SNOOPING={0x8}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:50 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 20:14:50 executing program 1: set_mempolicy(0x8002, &(0x7f00000000c0)=0x90d5, 0x43) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x157, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x24, 0x0) 20:14:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0x56}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x401, 0x10180) 20:14:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0) 20:14:50 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x80803, 0x4000000000000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0a000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 615.490385][T19662] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 20:14:50 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x80000001) 20:14:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800000, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001400000228bd70009efbdbdf"], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x68ced8dc1926764c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setlease(r3, 0x400, 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) [ 615.712389][T19667] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 20:14:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0) 20:14:50 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) [ 615.880728][T19679] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 20:14:51 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) close(r3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r0, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0xfffffec8) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @sdr={0x76d45a4a6d7fad4f, 0x3}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r6, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {@in=@loopback}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 20:14:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0) 20:14:51 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x8000) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 616.398775][ T4123] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 616.431743][ T4123] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on sz1 [ 616.485111][T19708] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 20:14:51 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x00\xff\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=0x0}}) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x7, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 20:14:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0xf77d, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280)=0x81) 20:14:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x0) 20:14:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa20}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r4 = socket$inet6(0xa, 0x400200000001, 0x0) r5 = dup(r4) setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x17c, 0x0, 0x500, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x5000}, 0x40000) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r10, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e22, 0x1, 0x8, 0x40, 0x6ad6cd4bd2622126, 0x67, r10}, {0x0, 0x4, 0x8, 0xff, 0x5, 0x0, 0x9, 0x8}, {0xffffffffffffffa8, 0x5, 0x0, 0x10000}, 0x6, 0x6e6bbf, 0x0, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x83, 0x0, 0x3, 0x2, 0x3f, 0x6, 0x8, 0x8}}, 0xe8) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0) 20:14:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x35, &(0x7f0000000040)={0x1}, 0x2a8) 20:14:52 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000000c0)={0xa0, 0x54, &(0x7f0000000040)="3c012b9f4e99e872e032352f7d57f5b00bd99c931a3bde9e15ee6260d23e6486b8ce1c20c150f1af8416958c99ff858c2fd865ca5f2f3b5e1e7f72223c5e61318357ecbccff601cb4b740b09be25b512a607b18240d12c78b67369d352d881fe58c9bcbc6c50d20230831540c8fa7c8b5fb342ae1defb20f0298", {0x3, 0x81, 0x31364d59, 0x0, 0x7, 0x1, 0x0, 0xc}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) [ 617.151349][T19725] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 20:14:52 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 20:14:52 executing program 5: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x120210c}, 0xc) 20:14:52 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000021eeaa08b5192100dc40092a000109021b00010000000009040000019352a50009058adc15202a9c3d0428fde70000000600950fb6b0404d95237b214f36324d98ea91ff2bbee2ecaed06e54"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x14, 0x96, {0x96, 0x24, "ce15548fa4edfef820dcaaeaaf5904cdf3e371b06bd4728a4433d435fc3bb55c074a82b8d040265e8a8705c08279fd906dba7ccf3c6c63b6ba817c63c164bef6a22b78b486bc706c8c2a2b699d12f38db5b0d1916425373a354b66a03438fd7d8a39625320279b8aa510843bffcdc73fd12eb55bd3a5510e34865fc705e47e8f3c08033aa44079b1bf612b9bc75500bd68460390"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000140)={0x0, 0x9, 0x9, "b933c4fa8dd3d5ffb7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xfff8, 0x8000, 0x9be7, 0x7, 0x3, 0x0, 0x200, 0x3f, 0x1000, 0x1ff, 0x1, 0xa8}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000300)={0x20, 0x89, 0x2, 0x1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r1 = socket(0x9, 0x54523e6f8f7182a7, 0xe6) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000000, 0x12, r1, 0x0) 20:14:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0xffffffffffffffff) getpgrp(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r3 = socket$inet6(0xa, 0x400200000001, 0x0) r4 = dup(r3) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) mq_getsetattr(r4, &(0x7f0000000040)={0x4, 0x1e, 0x100, 0x707, 0x2, 0x1, 0x20, 0x9}, &(0x7f0000000100)) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0xe03f0300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:14:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0xffffffffffffff34) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x2ec2b22f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 20:14:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockname(r3, 0x0, 0x0) [ 617.657826][ T4123] usb 3-1: new high-speed USB device number 65 using dummy_hcd 20:14:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0xfffffffffffffffd) 20:14:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x9, 0x800, 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:52 executing program 1: r0 = userfaultfd(0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 20:14:53 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80002004}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 617.913410][ T4123] usb 3-1: Using ep0 maxpacket: 8 20:14:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0xffffffffffffff34) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x2ec2b22f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 20:14:53 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x400) ioctl$FIGETBSZ(r0, 0x40184152, 0x0) 20:14:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_TTL_PROPAGATE={0x8}]}, 0x24}}, 0x0) [ 618.181127][ T4123] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 618.190760][ T4123] usb 3-1: New USB device strings: Mfr=9, Product=42, SerialNumber=0 [ 618.199205][ T4123] usb 3-1: Product: syz [ 618.203797][ T4123] usb 3-1: Manufacturer: syz [ 618.274797][ T4123] usb 3-1: config 0 descriptor?? [ 618.335217][T19787] netlink: 'syz-executor.0': attribute type 26 has an invalid length. [ 618.382727][T19791] netlink: 'syz-executor.0': attribute type 26 has an invalid length. 20:14:55 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e55f4, 0xffffffffffffffff, 0x0) 20:14:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x400200000001, 0x0) r2 = dup(r1) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0xffffffffffffff34) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x2ec2b22f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 20:14:55 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/148, 0x2f) getdents(r1, &(0x7f0000000200)=""/139, 0x8b) open_by_handle_at(r1, &(0x7f00000002c0)={0x90, 0x5, "74caad8e40bf6f2c0bad42bbe2556c25c6bb6146b3bc78e18688b812b6ab1a95b8743d029bea59208395ae1a71696a819c3b333e338cca37e087bec4023c489f11e007ecb0c2e38ed0373e0135741cd7002f788c9ba4460f81f1a4ab9c9e103cd23183f3e284ff6b985330f966ef7bad5ea39d15954e36e2eb56f14502a72630ddb26dd309ded85a"}, 0x8000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'team_slave_1\x00', 0x100000000001}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 20:14:55 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e187a48d30b3", @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x24, 0x0, [@guehdr, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x1}, @guehdr={0x1}]}}}}}, 0x0) 20:14:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) [ 620.379234][ T4123] usb 3-1: USB disconnect, device number 65 20:14:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x80041285, &(0x7f0000000000)) 20:14:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x400000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x4280, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000140)={0xfff, 0x3f, 0x4}, 0xfffffffffffffe92) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:55 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x0, 0x2, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) 20:14:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) 20:14:55 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000000000000001804000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800"/2376]}, 0x9c0) 20:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0xffffffffffffff34) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x2ec2b22f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 20:14:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x80041285, &(0x7f0000000000)) 20:14:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = socket(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="2156bf062735b5c64871a6b87188b87e4ea6af737f", 0x15}, {&(0x7f0000000100)="2026a288f154945bd8d981e37d178d6dc155a2ee560c176e3c2ddb977bb07f98819939e729b36c4c75e684bebe8f50c87ca6ff160ce1acf1e2759734f193773dbaeac37b147f53185d72c67500467958cd3cfa2a79e588c7fb5834f88a24661164b5f0493186bb453adc76af286bef1fb0b9dc92cbb6b94dd89d9d5cbe030bc67e535705e0352106b9cc1b5fdf32afb91b53a50fe0860384319d5970c131ea7abe56c4c2d1ab83f0b8a99f04d8c35e3677d28cfb8cbbf8091253029ab59e2a44634ca575318ff37304b02431e1fbf900af853979f945661e05e7dbb3082ceb8917ca80d948", 0xe5}], 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0xd580, 0x6, 0xfffffffd}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000ac0)=""/185}, {&(0x7f00000006c0)=""/84}, {&(0x7f0000000740)=""/78}, {&(0x7f00000007c0)=""/71}, {&(0x7f0000000840)=""/223}, {&(0x7f0000002640)=""/4096}, {&(0x7f0000000940)=""/92, 0x1d6}, {&(0x7f0000000180)=""/48}, {&(0x7f00000009c0)=""/23}], 0x100000000000002a) 20:14:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) 20:14:56 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 20:14:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x80041285, &(0x7f0000000000)) 20:14:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x40, r1, 0x701, 0x0, 0x0, {0x13, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x5}]}]}, 0x40}}, 0x0) [ 621.307215][T19855] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:14:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000040), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x5, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:14:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x80041285, &(0x7f0000000000)) 20:14:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) [ 621.374511][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:14:56 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) 20:14:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) unshare(0x400) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xa927, 0x2d}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, 0x0, 0x0) 20:14:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000640)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 20:14:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x10001}, {0x47, 0x1}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r2, &(0x7f0000000080)='\x00', 0x1e8) [ 621.631577][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:14:56 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) 20:14:56 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x4, 0x3, 0x800, 0xfffffffffffff86e, 0xe77, 0x8, 0x49a4, 0xe1e, 0x0, 0x6, 0x4, 0xe7d, 0x4300000000, 0x4e, 0xffffffffffff14ee]}, &(0x7f0000000140)=0x100) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x9}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1}, &(0x7f00000001c0)=0x8) 20:14:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000000), &(0x7f0000000140)=0xdf796efb1b91693c) 20:14:57 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x141042, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [ 622.104241][ T3382] usb 2-1: new high-speed USB device number 55 using dummy_hcd 20:14:57 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)={0x20000001}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0xfffbffff80000013}) 20:14:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1}, &(0x7f0000000100)=0x8) 20:14:57 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x7ff}, 0x28, 0x1) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1e3a5a9c9b9e75f7, r3, 0x0) [ 622.353439][ T3382] usb 2-1: Using ep0 maxpacket: 8 20:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x3, 0x0, [{0x40000001, 0x8, 0x1}, {0x1}, {0x80000008}]}) [ 622.493963][ T3382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.506192][ T3382] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 622.519819][ T3382] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 622.529303][ T3382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:14:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0xed) 20:14:57 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x111031, r0, 0x0) [ 622.692856][ T3382] usb 2-1: config 0 descriptor?? 20:14:57 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) [ 623.165574][ T3382] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 623.190425][ T3382] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input70 [ 623.291305][ T3382] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 623.372386][ T3945] usb 2-1: USB disconnect, device number 55 [ 624.213442][ T3382] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 624.453309][ T3382] usb 2-1: Using ep0 maxpacket: 8 [ 624.573493][ T3382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.584686][ T3382] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.597761][ T3382] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 624.607036][ T3382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.616897][ T3382] usb 2-1: config 0 descriptor?? 20:15:00 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@']) 20:15:00 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) 20:15:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x200020) sendmmsg$alg(r1, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="3ec48d62bc8229fa051cc685986b0d7307fb90bb78d484978e0d5b1800052e3e78a535b2f9895295607dc8f49fc9c8e9d183443590ba", 0x36}, {&(0x7f0000000140)="2f7802746a364ea12aca882ca02424cc665998c7c351a7d5aac5dafd6a4d32bb363c7cc00cc57ec9951cf406b255ac17564b24f8a7b87cad585034a25f6ee384f07baf27bc82661ce7d654609347da65c6ddb4b8d5a19dc5a90c2af91a7408f4079e53f2483b88bbb8a3b471728ebe84198d24759980694c3b0b5d452774858ff1506f1d82089e185db91e6fff230c79f5a4a2cd02d5e38cd32a2c24c851575dc7808cace7d2ff68ad48281e72016a08d6432a95ff7f52197ce8fd0ab2cecfea2b69a495e6f49cd31124080b683916caa9a55abd552fc14490ca892d1c155e0832b54f42b866ba667071c6d9a505", 0xee}, {&(0x7f0000000240)="eff92b0a5039b1c30337e1992f260490f7687ba2b9ce6d769a4b1acc994dff4eb44ad665393f7e862e25c7b0ef766891344de7ada9049dc7997c9ebaf5d4eb05781f9965c29f2bc90dcd6585252bc77ddd68435c93f65eeeeefb86eab0d966ceaeb1e296e2e0535ec2596e5722dbd6b6a13b821c144d27af46797b3e2d1f7a03c02e788e22e1d18f1791c6a1ba928d10533085db46d4543ef5fbf70d168eb145468846a155d617914e287df0f96689c354c7", 0xb2}, {&(0x7f0000000300)="a59e61ee28387fc874cd308b22eaae33908812f9298df45958d013b6c1306073b2a96e58bfed7a71763f76e0b09bfd107e3b0af5afdc84610693b0122c556f099848cd80b3edc1ee26ab2453a11c656e86a4d4c2b359c8f01ef6a9ab106e467c0a29fdb85ca42eb0f6b270c74a32b6859633b7463655c30d8953fa6c3a2c019b78030ce8eaa7f1aaf5932f16ccb9f420b0ff2e821251235184e2471d7924c7a43a44617c0756b71a86a990727c310c46647aa3247fb604ea9e08ded1221c18e4830b1ee6eef9937bef422f4e68ffd4c3eaf8ec8944e4c871e855b67f813a3d0deb77ee831d431c4dd1e9d9354b", 0xed}, {&(0x7f0000000400)="f42ca573985a66f19a7f2df56e44c80771bdeee6aebbc5cb5f2c67780d9daad0b24eaa8be742ad87bc7b6b847d6a2637ef492bc66a9b1bb3de715d382c5ab0cac0eeb5cc9de661ff016790e5fd33a39b28dbf42864ae0091", 0x58}], 0x5}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="3e194ced2bb0ff89ef65d734edfde1265a32f9f439d3400fed99968611fbc30f72fe9b221b145c30265259a758bf519e8fdad733f854298f5bc2e008ce961507bc4fb227497f59851faf872171f55cb7572e1936d1404883740055fd47985da086de1e17a0f8ed1eebdab4da14ee3e4b4f51eaedbd28a887565763", 0x7b}, {&(0x7f0000000580)="ae9ee90ae480767d3515a8d861b1926927ffd99c5cedced519e6fcdd39b584bbe9a36947144fc64178a86a34b6e21ba1f9830a3f57692edfd70427a85bcf7f475505dea1", 0x44}], 0x2, &(0x7f0000000640)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x4}], 0x2, 0xa050) r2 = socket(0x11, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r4 = socket$inet6(0xa, 0x400200000001, 0x0) r5 = dup(r4) setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@abs={0x0, 0x0, 0x4e22}, 0xfffffffffffffe9c) ioctl$KDDELIO(r5, 0x4b35, 0x9360) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000700)={0xd000, 0x4000, 0x7fffffff, 0x4b3c, 0x6}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x240) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="002edd03", @ANYRES16=r8, @ANYBLOB="0824f5fd81000000100000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00030100000000000000010000000800040004000000080006003f000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xd040) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r9, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000840)=0xfffffffd, 0x4) dup(r6) 20:15:00 executing program 3: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0xd004, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 20:15:00 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xef3, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, r2, 0x0) r3 = socket$inet6(0xa, 0x400200000001, 0x0) r4 = dup(r3) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$KDSKBLED(r4, 0x4b65, 0x3) 20:15:00 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) [ 625.035498][ T3382] usbhid 2-1:0.0: can't add hid device: -71 [ 625.041830][ T3382] usbhid: probe of 2-1:0.0 failed with error -71 [ 625.071313][ T3382] usb 2-1: USB disconnect, device number 56 20:15:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xde, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84700014}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x39, 0x800, 0x70bd2a, 0x25dfdbfd, {0xc}, [@generic="d1336b87e4bcc6c82ba90b4438c395e019bf1b64139a03db9ea04c6fac68269e8e081308b7d73af2c82af4c3854a0f96e6f466e38b4d006870da053fffb6cfecaa15d3c1a73af5ae298798b7c101e6d850c8bc57996ab3efc0b769e9aa29a80a3bb7261d4140898ab873788aa905dbc728c1bcd8fd3d35a0", @typed={0x8, 0x89, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001f40)={0x18, 0x0, 0x0, 0x0, 0x5}, 0x3c) 20:15:00 executing program 2: getcwd(&(0x7f0000000000)=""/14, 0xe) r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket(0x11, 0x4, 0x9) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000003c0)={0x30, "3c67d321fec4b67195eb103e4bd37e37ffe154629c6895a79399e2ec88df9fd399e756db1ca7688fdc6ef68023a0ef2095ca695c89ba374ba79966185e595a74"}) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x40, 0xc8843) sendto$inet6(r3, 0x0, 0xfffffffffffffeba, 0x40, &(0x7f00008d4fe4)={0xa, 0x4e01, 0x0, @mcast1, 0x4000}, 0xffffffffffffffa6) r4 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) recvmsg$kcm(r5, &(0x7f0000000380)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/232, 0xe8}], 0x1, &(0x7f0000000340)=""/19, 0x13}, 0x40000000) mlockall(0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, r4, 0x0) 20:15:00 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 20:15:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x18e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x13, &(0x7f0000000000), 0x20a154cc) [ 625.360052][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:15:00 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200000c8, &(0x7f00008d4fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000}) 20:15:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r4 = socket$inet(0x2, 0xa, 0x0) dup3(r4, r0, 0x0) 20:15:01 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) 20:15:01 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x214001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x1e3a5a9c9b9ce5f5, r0, 0x0) 20:15:01 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) 20:15:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x400) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000100)={{0x8}, 'port1\x00', 0x8, 0x40, 0x0, 0x4, 0x7, 0x10000, 0x80c, 0x0, 0x0, 0x7}) 20:15:01 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x138810, 0xffffffffffffffff, 0x0) 20:15:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, {0x2, 0x1, 0x0, 0x6, 0x62, 0x8}, 0x81}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_netdev_private(r3, 0xa9fc, &(0x7f0000000100)="f981bdbb8daf55bf6c72b8b3a6262a61a968b1df4bfd86c8286da2cf13dda31e8b2f02acb10dee9df70910e4f78dd3d1336828b49b2cad7e855f782146640f941587a9009445b9e1fc1e3c55068a87dba40c12a81c6fbcac4dec6ab0eed1fd2eea3544f118f2806e528c9c1c78e0b532a5f3f57fad993f8f") r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:01 executing program 2: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) 20:15:02 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) setrlimit(0xd, &(0x7f0000000000)={0x8, 0x1ff}) 20:15:08 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x0, 0x1000}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x44}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0xfffffffffffffff8}], 0x7) semop(0x0, &(0x7f0000000240), 0x6) 20:15:08 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 20:15:08 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) 20:15:08 executing program 3: r0 = socket$kcm(0x10, 0x240000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0001410100000000000019f000000003000000000000000000", 0x2e}], 0x1}, 0x0) 20:15:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) socket$inet_udplite(0x2, 0x2, 0x88) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:08 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0x223100) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x5}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000012c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r7, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000013c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f00000014c0)=0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = getuid() getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r10, r11, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = getuid() getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r13, r14, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = getuid() getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r16, r17, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = getuid() getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r19, r20, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) getgroups(0x7, &(0x7f0000001500)=[r17, 0x0, 0xee01, r20, 0xee01, 0xffffffffffffffff, 0xee00]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) r25 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r25, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r25, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r26, 0x8903, &(0x7f0000001540)=0x0) getresuid(&(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)=0x0) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r30, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r30, &(0x7f0000000040), 0x4) r31 = syz_open_dev$mice(&(0x7f0000001700)='/dev/input/mice\x00', 0x0, 0x400000) r32 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) r33 = timerfd_create(0x9, 0x80000) r34 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r34, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r34, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r35, 0x8912, 0x400200) r36 = getpgrp(0x0) r37 = socket$nl_generic(0x10, 0x3, 0x10) r38 = getuid() getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r38, r39, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e00)={0x0, 0x0, 0x0}, &(0x7f0000002e40)=0xc) r41 = socket$isdn(0x22, 0x3, 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r42, 0x8912, 0x400200) r43 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r43, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r43, &(0x7f0000000040), 0x4) r44 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r44, &(0x7f0000001700)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0bb10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa8bc2d26fc4d3cab145e3a2f1af344471cf5b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b03000000000000000000"], 0x12e) write$UHID_DESTROY(r44, &(0x7f0000000040), 0x4) r45 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002e80)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000002f80)=0xe8) r47 = socket$nl_generic(0x10, 0x3, 0x10) r48 = getuid() getsockopt$sock_cred(r47, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r48, r49, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r50 = socket$rxrpc(0x21, 0x2, 0x2) r51 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r51, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r51, &(0x7f0000000040), 0x4) r52 = gettid() rt_sigqueueinfo(r52, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x5}) r53 = getuid() r54 = socket$nl_generic(0x10, 0x3, 0x10) r55 = getuid() getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r55, r56, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) sendmmsg$unix(r1, &(0x7f0000003100)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)="ce8f8d49c04b0b833c56bee20517189ae3e8d37fd997a89d9fd4948c3d81c175ffe0085ec1123a2c5e9f9c9c6e940a6a063c5f58a2456f014f80f53cc82d875b6d0a6dbf193ab3aecc18b4726bd7a7aa5487a8206d", 0x55}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="8fd71abf50cb0ac18b79fa4d65b4914c6ede9b3c659744501a6b461db278c7613ea33b9880b5a812fdd4c22f39b74895c9f46ca4d2ff0366ee4dd3", 0x3b}], 0x3, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r0, r5, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r21}}}, @rights={{0x34, 0x1, 0x1, [r22, r0, r23, 0xffffffffffffffff, r0, 0xffffffffffffffff, r24, 0xffffffffffffffff, r25]}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r30]}}, @rights={{0x1c, 0x1, 0x1, [r31, 0xffffffffffffffff, r32]}}], 0x118, 0x4}, {&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001940)="40e60729e1acd7e2394add4e83a25738f46b4a3a2f9d965e33bff1d675e281a88b34bb57b90ba4cc2eafdbd92506130d29578bcd6593421529fe62b3e4edc7149e3a20dea9e5535f996afd1e9965d380c00a7b18cfe79c6bcc7a18efd9f49ec1f3f94d467f6f0139775ad5f0afefcc6357f56e8c133f838feaef0c26e6f0c275c7306dd12d0f25c336c94b07c673daf11c2fbf22b51821e3e8f9384b3b6131217b8a6b2809c44b3414290beec2d91e", 0xaf}, {&(0x7f0000001a00)="ca87aa95e6d7a5666c1285a429815ed2c45b0dd4b3b1f982cfca884ac94e57f906a707d07ebebc7dbf168742530d71d04d36a60c065f0b66", 0x38}, {&(0x7f0000001a40)='&', 0x1}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="63978518bf9d6f899fced87da19f7c", 0xf}, {&(0x7f0000002ac0)="8d83dd31847874211b62e8b0f50ff191e22282a130f84fcc4ceddab4e2515843163cb1df546838ef54d112c1120d2f7e5ee6c1e76797795e457da6bfd1d603d195ce6dfd765e18aa2535d727662673bec53153297174585e93e0065845e394816f8d75861dd7d11c43a058b42edb6a3b70957465ddc0f859d7efbf454d06e984545597b13c64c1e1cf1dc1368b", 0x8d}], 0x6, &(0x7f0000002c00)=[@rights={{0x14, 0x1, 0x1, [r33]}}], 0x18, 0x800}, {&(0x7f0000002c40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)="a1eddcd53e6fe9bc4f345908dd0e4ba9b0d1f72125b2c5d41119a6b9aea1d8b606c507ab9d2c5a08dbf61f18547e6a030de3d4917c8879f9e8c82d7a6e60c5ebac3abf9be26d810dcb4b098b5bf8f583b5c77732c6c8b979114686c6bec14e0e40c147c7eee4073ec727d96ad6366baa236659271dc398", 0x77}, {&(0x7f0000002d40)="d25a56bd461a8a48437598f485802eeb5534393cf02edeb2f37fe900ee96570fadac3e632912ad7cf9341358fa3e83beae4f34a8ee6ec551626c34edbf3001ab0c7657fa905f63025bb6e22cfe1a0b5eb5b95f0a5b9a1d9e22cf25e1fa8cfc80d719a96cedff2271782a5894c860a6a2955fc6", 0x73}], 0x2, &(0x7f0000002fc0)=[@rights={{0x18, 0x1, 0x1, [r0, r34]}}, @rights={{0x18, 0x1, 0x1, [r35, r0]}}, @cred={{0x1c, 0x1, 0x2, {r36, r38, r40}}}, @rights={{0x18, 0x1, 0x1, [r41, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r42, r0, r43, r0, r0, r0, r44]}}, @cred={{0x1c, 0x1, 0x2, {r45, r46, r49}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r50, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r51]}}, @cred={{0x1c, 0x1, 0x2, {r52, r53, r56}}}], 0x128, 0x20}], 0x3, 0x10) [ 633.138673][ T3382] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 633.181822][ T3382] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on sz1 20:15:08 executing program 3: r0 = socket$kcm(0x10, 0x240000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0001410100000000000019f000000003000000000000000000", 0x2e}], 0x1}, 0x0) 20:15:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$void(r0, 0x5451) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:08 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x9e, 0x4, 0x9, 0x0, 0x0, 0x5279, 0x1c094, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0x12}, 0x20b00, 0x0, 0xffffffff, 0x6, 0x7, 0x20, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000001a80)='keyring\x00', &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000001b00)='\x00', 0x0) keyctl$negate(0xd, 0x0, 0x474bd0c5, r0) sysfs$1(0x1, &(0x7f00000000c0)='\x00') 20:15:08 executing program 3: r0 = socket$kcm(0x10, 0x240000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0001410100000000000019f000000003000000000000000000", 0x2e}], 0x1}, 0x0) [ 633.861844][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:15:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071108000000000009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:15:09 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xb2180, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000100)={"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"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$assume_authority(0x10, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:09 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x501200) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000140)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f0000000180)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 20:15:10 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 20:15:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfc0004) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x90) 20:15:11 executing program 3: r0 = socket$kcm(0x10, 0x240000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0001410100000000000019f000000003000000000000000000", 0x2e}], 0x1}, 0x0) 20:15:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00, 0x400000000000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0x0, 0x0, [@typed={0x300, 0x0, @fd}]}]}, 0x24c}}, 0x0) 20:15:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x3f}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:11 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='5proc/se,v\xb6\xc9et/pfkey\x00', 0x100002, 0x0) r1 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz0\x00', {0x3, 0x2, 0x0, 0x6e4}, 0x25, [0x3, 0x5, 0x0, 0x2, 0x1, 0x4, 0x43b, 0xe5, 0x5, 0x4fe8b9cf, 0x5, 0xdd85, 0x8000, 0x7, 0x10001, 0x1, 0x8000, 0xfffffffb, 0x40, 0x10, 0x2, 0x6, 0xffff, 0x6, 0x6, 0x8, 0x101, 0xffffffb3, 0x7, 0x8, 0xffff8001, 0x1, 0x4, 0x8, 0xfffff6dc, 0x1, 0x6a5e, 0x9, 0x7fffffff, 0x0, 0x8, 0x6, 0x1000, 0x65a9eecf, 0x1, 0x38b, 0x3, 0x7, 0x80000000, 0x8001, 0x7, 0x3f, 0x6, 0x1, 0x1, 0x8, 0x80, 0x5f5, 0x101, 0x10001, 0x2, 0x0, 0x2, 0x8], [0x80, 0x80000001, 0x8, 0x7f, 0x2, 0x1, 0x7, 0x1f, 0x6, 0x2, 0x3, 0x8dc9, 0x0, 0x3, 0x101, 0x400, 0x1c3, 0x4, 0x6, 0x8000, 0x9, 0x80000001, 0x3, 0x8, 0xd80, 0xa4e9, 0x2, 0x1f, 0x0, 0x3c95, 0x3, 0x3f, 0xe2b, 0x401, 0x2, 0x1, 0x0, 0xd70, 0x1, 0xfff, 0xfffff531, 0xd2, 0x5, 0x4, 0xffffff80, 0x8, 0x400, 0xa95, 0x5, 0x200, 0x8, 0x8000, 0x1, 0x4, 0x2, 0x4, 0xf7f, 0xfa67, 0x5, 0xa0fac16e, 0x3, 0x7, 0x3, 0x396], [0xeee, 0xaab, 0x6, 0x1, 0xfffffffd, 0x3, 0x5, 0x877, 0x80000001, 0x9, 0x2, 0x5, 0xffff6920, 0x8001, 0x4, 0x3ff, 0x1, 0x3f, 0x33e, 0x4bc, 0x6, 0x80000001, 0x2, 0x3, 0x1, 0x7fff, 0x9, 0x49, 0x5, 0x101, 0x3, 0x9, 0x6, 0x80000001, 0x3f, 0x200, 0xf990, 0x1ff, 0x6, 0x1ff, 0x7, 0x8, 0x2, 0xae, 0x1, 0x3, 0x1, 0x6, 0x2, 0x70, 0x3f, 0x4, 0x3, 0x3451, 0xe71, 0x4, 0x5, 0x4000400, 0x3, 0x400, 0x4, 0x81, 0x4], [0xff, 0x6, 0x13d, 0x6, 0x10001, 0x2a682936, 0x5, 0x80000000, 0xd31, 0x60000000, 0x8, 0x2c, 0x0, 0x5bd25021, 0x5e47, 0x6, 0x20, 0x86, 0x7, 0xffff635c, 0x8, 0x2, 0x200, 0x50, 0x984c, 0x2, 0x4, 0x2, 0x986, 0x1f, 0x8000, 0x9, 0x1, 0x4, 0x8, 0x7, 0x5c1ff910, 0x4, 0x401, 0xb69, 0x9, 0x3ff, 0x3, 0x101, 0x0, 0x3, 0x6, 0x5e0, 0x499c, 0xfffffff7, 0x10001, 0x28000, 0x3ff, 0x7, 0xf0f4, 0x6, 0x7c75225c, 0x80000001, 0xcf7, 0x1, 0x1, 0x0, 0x40, 0x2]}, 0x45c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000540)={'caif0\x00', 0x6}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x2195c5, 0x0) write$UHID_INPUT(r3, &(0x7f00000005c0)={0x8, "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", 0x1000}, 0x1006) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) [ 636.135690][T20081] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 20:15:11 executing program 3: timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x9208, 0xfffffffffffffffe) tkill(r1, 0x800000015) 20:15:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) io_setup(0x9, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x7114c3dd54dfc13e}]) 20:15:11 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1e3a5a9c9b9e75f7, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) 20:15:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup(r0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x4}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:11 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:15:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000040)=0x1, 0x8c, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140), 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xb8f2, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0xef4, 0x4, 0x2, 0x3, 0x7f, 0x1, 0xfffffff9}, &(0x7f0000000240)=0x20) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000001c0)=""/9) 20:15:17 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 20:15:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x44) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x0, 0x0, 0x100000000001}) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x40044, 0x0) unshare(0x400) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000000c0), 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) fsetxattr$system_posix_acl(r3, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=0x7, 0x4) lsetxattr$security_capability(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='security.capability\x00', 0x0, 0x0, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$alg(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=""/1, 0x1}}, 0x10) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000900)) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000240)={0x9, 0x2, {0x52, 0x8000, 0x0, {0x0, 0x1}, {0x0, 0x4}, @rumble={0x4}}, {0x0, 0x0, 0xa9, {0x0, 0x7fffffff}, {0x6, 0x7f}, @rumble={0x0, 0x5}}}) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) 20:15:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101203, 0x0) r1 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x1, 0x40) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x7, 0x0, 0x67}}) 20:15:17 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 20:15:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/105, 0x69}], 0x1, &(0x7f0000000140)=""/113, 0x71}, 0x10000}], 0x1, 0x1, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x80, 0x8, 0x1, 0x2, r1}, &(0x7f0000000300)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x2, 0x41c, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0xa, 0x4, 0x7, 'bridge_slave_1\x00', 'bcsf0\x00', 'syz_tun\x00', 'sit0\x00', @broadcast, [0xff, 0xff, 0xff, 0x1fe, 0xff], @local, [0x7f, 0x17e, 0x0, 0x0, 0x1fe, 0xff], 0xe6, 0x156, 0x186, [@time={'time\x00', 0x18, {{0x1, 0x5, 0xc92e, 0x12d64, 0xffffffff, 0xa8, 0x1}}}, @cluster={'cluster\x00', 0x10, {{0x8001, 0x8, 0x6}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0x7}}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xf32e533a982485ab}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xef}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x3, 0x93b9edbc34b8680e, 'eql\x00', 'ip6_vti0\x00', 'bond0\x00', 'veth1_to_team\x00', @empty, [0xff, 0x0, 0x101, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0x80], 0x126, 0x19e, 0x1d6, [@limit={'limit\x00', 0x20, {{0xa791, 0x101, 0xd8ab, 0x4, 0x8000, 0x800}}}, @stp={'stp\x00', 0x48, {{0x6, {0x40, 0x100, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x80, 0xb3a5dfa69db1ce6d, 0x0, 0xff, 0x80], 0xffff, 0x6, 0xffff, 0x1ff, @random="2e65fa56a83a", [0x0, 0x0, 0x0, 0x1fe, 0xff, 0xff], 0x4e23, 0x4e24, 0x401, 0x36, 0x1580, 0x400, 0x40, 0x7f, 0x5, 0x5}, 0x881, 0x20}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x8, 0x7f, 0x1, 0x0, "21b0fd5f033f56bf25c1d58ccf189524f0123e6a81bd7935ef275aee7c1cccc9cda5b7dcb59b77c6310bed24a19b4f682388bbc1539f9bb5b6b8a0f6d4b0bbb4"}}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x494) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)={0x0, 0x96, "1aa9da3e1b05cc54d3286fe406ce24fe30bfb773e787038f9735c2771dd82cd4884d38530bc9bb512c6f13e40d66c47d7b46c4e082b00234cccf3db6fab81fc561c84a5bb647e4f8e7497dd29a73e789961847a3deba4d9c72a222472e196682ae0dfae43278672b1ffdf1e5ff460e361f24053f4b2bc25e4bfd11a1e8af0a844a973c85161cb9c6cf8dfc393dfb69749b968d4e0dd6"}, &(0x7f0000000900)=0x9e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/autofs\x00', 0x101140, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000980)=0x7) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000009c0)) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000a00)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/capi/capi20\x00', 0x42002, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000a80)='/dev/vcs#\x00', 0xef, 0x30100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/autofs\x00', 0x8400, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000b00)={0x8, 0x9}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000b40)=0x0) waitid(0x2, r6, &(0x7f0000000b80), 0x1000018, &(0x7f0000000c00)) bind$unix(r2, &(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer\x00', 0xc000, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000d80)={0x3, @pix={0x0, 0x4, 0x13c3bf1db, 0x1, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1, 0x2}}) r8 = accept$unix(r5, 0x0, &(0x7f0000000e80)) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000ec0)='syz_tun\x00') r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000fc0)={0xf58fffb, 0x7, 0x9, [], &(0x7f0000000f80)={0x980929, 0x0, [], @string=&(0x7f0000000f40)=0x1}}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x759495b8ad148d14, 0x0) ioctl$MON_IOCQ_URB_LEN(r10, 0x9201) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/mixer\x00', 0x20300, 0x0) ioctl$KDSKBMODE(r11, 0x4b45, &(0x7f0000001080)) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, 0xfffffffffffffffd) socket$inet(0x2, 0x2, 0x5) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r12, 0x7706, &(0x7f0000001100)) 20:15:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1000, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0xfe, 0x6}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = socket(0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x7f, 0x0, 0x1f}, 0x10) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0xb, &(0x7f000095dff8), &(0x7f0000000180)=0x4) 20:15:17 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) move_pages(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000080), 0x0) 20:15:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x200000000009) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 20:15:24 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) 20:15:24 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xbe}, 0x4d6) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) [ 649.672766][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.680963][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.688696][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.696523][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.704329][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.712139][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.720377][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.728245][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.736173][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.743966][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.751634][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.760116][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 20:15:24 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000500)="1f0000000104ffd00e0ac5da07000000010000000b00010003049b0d950547", 0x1f) [ 649.767787][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.775491][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.783948][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.791534][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.799512][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.807353][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.815652][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.823541][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.831129][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.838896][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.846576][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.854287][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.861872][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 20:15:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getpeername$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) [ 649.869568][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.877445][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.885128][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.892788][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.900488][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.908190][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.915884][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.923582][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.931163][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.938864][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.946560][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.954684][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.962303][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.970006][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.977701][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.985373][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 649.992932][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.000748][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.008457][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.016245][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.023984][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.031622][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.039500][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.047235][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.054933][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.062553][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.070253][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.077954][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.085637][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.093346][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.100928][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.108662][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.117775][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 20:15:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x98}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 650.125518][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.133092][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.140818][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.149252][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.157392][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.165214][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.172845][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.180534][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.188316][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.195994][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.204678][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.213423][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.221036][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.228720][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.236518][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.244184][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.251777][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.259507][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.267141][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.274996][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.282628][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.291290][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.299639][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.307330][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.315129][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.322764][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.330456][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.338233][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.345904][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.353961][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.361595][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.369380][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.378095][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.385800][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.393628][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.401285][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.409410][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.417196][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.424891][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.432530][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.440380][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.448062][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.455739][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.463404][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.470972][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.478650][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.486368][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.494057][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.501637][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.509422][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.517068][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.524729][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.532325][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.540012][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.547666][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.555641][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.563353][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.570939][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.578759][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.586458][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.594176][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.601782][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.609501][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.618143][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.625843][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.633531][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.641106][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.648830][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.656502][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.664233][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.671796][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.679706][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.687373][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.695100][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.702782][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.710554][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.718340][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.726083][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.733766][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.741533][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.749203][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.756973][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.765340][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.773354][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.781124][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.789471][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.797259][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.804988][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.812659][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.820466][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.828344][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.836177][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.844051][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.851916][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.860720][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.868345][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.876155][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.883832][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.891704][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.899385][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.907137][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.914977][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.922557][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.930262][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.938242][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.945904][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.954181][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.961781][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.969484][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.977141][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.984817][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 650.992421][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.000109][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.007773][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.015448][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.023036][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.030716][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.038356][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.046035][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.053830][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.061397][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.069081][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.076741][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.084412][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.092165][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.099855][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.107506][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.107615][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 20:15:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "79dafcfe5587246b"}) 20:15:25 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x9, 0x2, 0x9) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in6}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000480)="201dce818b84a41eef7151968e317c67165df6884baabd59103636089be027ea4a2be2605d4c9e08c2e4f9eda7a97a21f26524165a7e7d2fe94827892cbd17bc9e0f06ab9011491931aa3560bc308f1edcb9a9c4f9fc154b92133789f042b64026f46ff0bd6fad7e6cd7bb6b0f7a69263dc7617bb777a651916be32cfbc612cd555347970a742c08d349a20b9654b926261d90491669c00886f10e0fab204611cfd0403838ed9a7ffa9f3da86e0681c21a26e1039d2d71c338668b04b00ef4e5ac44d2f0179de2416673681194bc") r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x3840}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000007b99b5c2d76e6141ee07537212cd20fe4d94a09a374a812241252e8f5b7fab2e8e3392358f2f1164e65b8b81d7f94563b405a8d4b8c4c04730301e6006db3217f9ef76ddc7deb3c4513b5e14966061a2401091579630fe2c0b4c7bd70b626d214002e9f1a7c91e549d492f0657d46efcf18c24ec6e15d2c6215b66fa95088c918fe6fbfdb2771ffb9c09e3cc6400cceddd3934d291c03832f181bb553b7df4", @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf25030000000c00060001000000000000000c000800040000000000000008000100000000000c00030000000000000000000c0006000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 20:15:25 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000580)={0x1, &(0x7f00000001c0)={0xa}, 0x0, 0x0, 0x25c}) 20:15:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000006606ddb0ac30630ef7f6656ba6ce5876289cd77e3206f869df2ee2939956a7cbf27b519e688d2127500fbc5190"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='trusted+\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000008c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1}) [ 651.107727][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.107892][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.123085][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 651.137980][ T3382] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 20:15:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) sync_file_range(r1, 0x62, 0x4, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) recvfrom$inet(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x20000100, &(0x7f00000011c0)={0x2, 0x4e20, @local}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0xc, 0x100, 0x1, 0x8001, 0xfffffffd}, {0x0, 0x4, 0x8, 0x357ec87a, 0xfffff1a4}, {0x80000001, 0x5, 0x8, 0x9, 0x1}, {0xa, 0xff, 0x20, 0x6, 0x6}]}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x80, 0x1}, 0xfffffffffffffece) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1}) 20:15:26 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) [ 651.450668][T12145] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 651.471451][ T3382] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 651.490493][T12145] hid-generic 0000:0000:0000.0025: hidraw1: HID v0.00 Device [syz1] on sz1 [ 651.547759][ T3945] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 651.556296][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.564430][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.572106][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.579777][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.587472][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.595122][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.602686][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.610341][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.617990][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.625638][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.633306][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.643835][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.651424][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.659254][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.666908][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.674559][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.682217][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.689888][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.697637][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.705298][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.712868][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.720525][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.728200][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.735842][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.743487][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.751145][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.758798][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.766456][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.774200][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.781785][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.789553][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.797211][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.804885][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.812467][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.820159][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.825864][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.827796][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.844634][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.852195][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.859851][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.867487][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.875121][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.882698][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.890342][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.897998][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.905815][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.913547][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.921115][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.928757][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.936392][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.947763][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.955418][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.962986][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.970709][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.978373][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 651.978473][ T3382] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 651.986122][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.001133][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.001431][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.008856][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.025644][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.033350][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.040915][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.045626][ T3382] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on sz1 [ 652.048841][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.066001][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.073773][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.081344][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.089107][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.096775][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.104455][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.112022][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.119706][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.127388][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.135073][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.142656][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.150311][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.157952][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.165597][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.173278][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.180856][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.188521][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.196170][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.203827][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.211432][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.219102][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.226783][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.234434][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.242014][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.249682][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.257348][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.265024][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.272606][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.280236][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.287885][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.295545][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.303103][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.310771][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.318419][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.326022][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.333661][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.341172][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.349114][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.357598][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.365271][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.372855][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.380509][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.388090][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.397129][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.404775][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.412480][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.420211][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.427798][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.435445][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.443289][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.450880][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.458716][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.469015][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.476775][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.484341][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.492008][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.499764][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.507519][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.515203][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.523413][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.531173][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.538861][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.546441][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.554123][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.561751][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.569875][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.577472][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.585118][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.592862][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.600522][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.608099][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.615852][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.623618][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.631159][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.638810][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.646506][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.654151][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.661711][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.669349][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.677035][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.684813][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.692295][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.699962][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.707571][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.715218][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.722782][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.730542][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.738192][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.745830][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.753474][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.760982][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.769404][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.777737][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.785544][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.793077][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.800786][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.808398][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.816042][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.823595][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.831079][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.838741][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.846342][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.854038][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.861543][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.869146][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.876789][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.884575][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.892310][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.899911][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.907521][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.915553][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.923291][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.930796][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.938417][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.946568][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.954285][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.961942][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.969830][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.977468][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.985124][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 652.992857][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.000494][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.008053][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.015673][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.023312][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.030946][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.039016][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.046611][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.054249][ T4123] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 653.067405][ T4123] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz0 20:15:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="a5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0, 0x2}, {&(0x7f0000000940)='%', 0x1}], 0x2}}], 0x2, 0x400c004) 20:15:28 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1}) 20:15:28 executing program 5: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) 20:15:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000100)=""/32) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:28 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) 20:15:28 executing program 5: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) [ 653.553448][ T3945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 653.673620][ T3945] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 653.923495][ T3945] usb 4-1: string descriptor 0 read error: -22 [ 653.930911][ T3945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.941471][ T3945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.986036][ T3945] cdc_ether: probe of 4-1:1.0 failed with error -22 20:15:29 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x305) 20:15:29 executing program 5: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) 20:15:29 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1}) 20:15:29 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) 20:15:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000200)={@dev}, 0x2c6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 654.159135][ T3945] usb 4-1: USB disconnect, device number 15 20:15:29 executing program 5: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) 20:15:29 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) 20:15:29 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 654.572602][T20251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.599626][T20251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:15:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='\x13\xf7ev\x05\x00\x00\x00o\x00', 0x204080, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x7f0bb3c4f7abb5d0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000140)=0x6, 0xfffffffffffffc47) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000001700)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0bb10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa8bc2d26fc4d3cab145e3a2f1af344471cf5b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b03000000000000000000"], 0x12e) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000001c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x1, @reserved}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x9}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:15:29 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 20:15:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0xac, &(0x7f00000000c0)={0x0, 0x0, 0x3, "49ef87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 654.877996][T20251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.912596][ T4123] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 654.954489][ T4123] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on sz1 20:15:30 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/87) [ 655.021239][ T3945] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 655.058560][ T3945] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on sz1 20:15:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 20:15:30 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$cgroup_int(r2, &(0x7f00000001c0), 0x12) readv(r1, &(0x7f00000002c0), 0x1a5) 20:15:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x200000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 20:15:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) recvfrom$inet(r1, &(0x7f0000000200)=""/44, 0x2c, 0x40000020, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400200000001, 0x0) r4 = dup(r3) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3ff, 0x2000) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x3ff, 0x1000, 0x1, 0x80}}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000340)={0x0, 0x100, 0x8000}, 0xc) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)=""/15, &(0x7f0000000280)=0xf) 20:15:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0}) ppoll(&(0x7f00000004c0)=[{r2}, {r0}], 0x2, &(0x7f0000000540)={r3}, 0x0, 0x0) [ 655.323447][ T3945] usb 6-1: new high-speed USB device number 17 using dummy_hcd 20:15:30 executing program 3: unshare(0x20400) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 20:15:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) 20:15:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x2001, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @bt={0x80000000, 0x2, 0x57e9, 0x5, 0x4, 0x3, 0x13, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) clock_getres(0x0, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockname$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r4 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r6 = socket$inet6(0xa, 0x400200000001, 0x0) r7 = dup(r6) setsockopt$inet_tcp_int(r7, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r7, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$CAPI_GET_SERIAL(r7, 0xc0044308, &(0x7f00000003c0)=0x8) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000100)={0x3, 0x0, 0x884d, 0x5d5, [], [], [], 0x9, 0x1d, 0x3, 0x9, "aa969d724ab4f909304df83ae57539f4"}) 20:15:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001900)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCEXCL(r1, 0x540c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 20:15:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084504, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x0, 0x0, "e82ecb093b37a9a093071914d39664321b2c2a850f323f6c37a1c9779ee1aee8"}) [ 655.569942][ T31] audit: type=1800 audit(1571084130.615:32): pid=20321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 [ 655.685601][ T3945] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 655.694463][ T3945] usb 6-1: config 0 has no interface number 0 [ 655.700700][ T3945] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 655.710495][ T3945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.746026][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.821170][ T3945] usb 6-1: config 0 descriptor?? [ 655.868101][ T3945] ssu100 6-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected [ 656.743864][ T3945] ssu100: probe of 6-1:0.139 failed with error -71 [ 656.754303][ T3945] usb 6-1: USB disconnect, device number 17 [ 657.483424][ T3382] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 657.843622][ T3382] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 657.851989][ T3382] usb 6-1: config 0 has no interface number 0 [ 657.858394][ T3382] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 657.867921][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.877976][ T3382] usb 6-1: config 0 descriptor?? [ 657.927249][ T3382] ssu100 6-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected 20:15:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0xac, &(0x7f00000000c0)={0x0, 0x0, 0x3, "49ef87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:15:33 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f00000004c0)) 20:15:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) 20:15:33 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0188c20006007356c37881d0bb3e2c258b0685079f"], 0x0, 0x17}, 0x20) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 20:15:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) 20:15:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x202000) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x451e4ac0f28b3df8) [ 658.244018][ T3382] ssu100: probe of 6-1:0.139 failed with error -71 [ 658.300061][ T3382] usb 6-1: USB disconnect, device number 18 [ 658.316259][T20352] ebt_limit: overflow, try lower: 0/0 [ 658.336826][ T31] audit: type=1800 audit(1571084133.385:33): pid=20353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 [ 658.384193][T20359] ebt_limit: overflow, try lower: 0/0 20:15:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x204000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) [ 658.407178][T20355] device nr0 entered promiscuous mode 20:15:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3}) 20:15:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) 20:15:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) [ 658.610366][ T31] audit: type=1800 audit(1571084133.655:34): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 20:15:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, 0xe8) [ 658.715622][ T3382] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 658.799391][T20376] ebt_limit: overflow, try lower: 0/0 20:15:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000f5ff0000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073797a5f74756e00000000000000000079616d30000000000000000000000000b76f6e645f736c6176655f310000000073697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d69740000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000003830325f330000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000b827d85034bb5ec6a300000200000000000000000000000000000000000000000000166d668100"/424]}, 0x220) [ 658.862946][T20355] device nr0 entered promiscuous mode [ 659.056376][T20385] ebt_limit: overflow, try lower: 0/0 [ 659.085773][ T3382] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 659.095166][ T3382] usb 6-1: config 0 has no interface number 0 [ 659.101396][ T3382] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 659.110975][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.131399][ T3382] usb 6-1: config 0 descriptor?? [ 659.177298][ T3382] ssu100 6-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected [ 660.053636][ T3382] ssu100: probe of 6-1:0.139 failed with error -71 [ 660.065692][ T3382] usb 6-1: USB disconnect, device number 19 20:15:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0xac, &(0x7f00000000c0)={0x0, 0x0, 0x3, "49ef87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:15:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x100, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000180)={0x29}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x42) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000100)) 20:15:35 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '.em0cgroup@wlan1proc//&\'+\x00'}, 0x1f) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="65786563202e657040776c616e3170726f632f2f26051747"], 0x1f) 20:15:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) 20:15:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000f5ff0000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073797a5f74756e00000000000000000079616d30000000000000000000000000b76f6e645f736c6176655f310000000073697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d69740000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000003830325f330000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000b827d85034bb5ec6a300000200000000000000000000000000000000000000000000166d668100"/424]}, 0x220) 20:15:35 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0188c20006007356c37881d0bb3e2c258b0685079f"], 0x0, 0x17}, 0x20) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) [ 660.599876][ T31] audit: type=1800 audit(1571084135.645:35): pid=20391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 [ 660.642417][T20398] ebt_limit: overflow, try lower: 0/0 [ 660.646089][T20394] device nr0 entered promiscuous mode [ 660.689640][ T31] audit: type=1400 audit(1571084135.715:36): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=2E657040776C616E3170726F632F2F26051747632F2F26272B pid=20397 comm="syz-executor.2" 20:15:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="23000000200081ae00060c00000f00000a000300000000018701546fabca1b4e7d06a4", 0x23}], 0x1}, 0x0) 20:15:35 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='#!\t '], 0x4) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:15:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0x8) 20:15:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0x8) 20:15:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0xa, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 660.983825][ T4123] usb 6-1: new high-speed USB device number 20 using dummy_hcd 20:15:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0x8) [ 661.092122][T20411] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 661.115743][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 661.364301][ T4123] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 661.372613][ T4123] usb 6-1: config 0 has no interface number 0 [ 661.378951][ T4123] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 661.388248][ T4123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.407986][ T4123] usb 6-1: config 0 descriptor?? [ 661.467429][ T4123] ssu100 6-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected [ 662.333886][ T4123] ssu100: probe of 6-1:0.139 failed with error -71 [ 662.345130][ T4123] usb 6-1: USB disconnect, device number 20 20:15:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0xac, &(0x7f00000000c0)={0x0, 0x0, 0x3, "49ef87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:15:37 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0188c20006007356c37881d0bb3e2c258b0685079f"], 0x0, 0x17}, 0x20) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 20:15:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0)) 20:15:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0x3475745ac5227fe9, &(0x7f0000000040)={0x0, 0x1c9c380}) 20:15:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffdd) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0x8) [ 662.903886][T20434] device nr0 entered promiscuous mode [ 662.918380][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:15:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0x3475745ac5227fe9, &(0x7f0000000040)={0x0, 0x1c9c380}) 20:15:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 663.006082][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:15:38 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x65, 0x80, 0x29, 0x40, 0x123, 0x1, 0xabfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x1, 0xeb, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 20:15:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 663.223408][ T3382] usb 6-1: new high-speed USB device number 21 using dummy_hcd 20:15:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0x3475745ac5227fe9, &(0x7f0000000040)={0x0, 0x1c9c380}) 20:15:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 663.384880][ T4123] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 663.593995][ T3382] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 663.602466][ T3382] usb 6-1: config 0 has no interface number 0 [ 663.608732][ T3382] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 663.618119][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.628345][ T3382] usb 6-1: config 0 descriptor?? [ 663.687431][ T3382] ssu100 6-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected [ 663.743902][ T4123] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 663.753656][ T4123] usb 1-1: config 0 has no interface number 0 [ 663.760268][ T4123] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ab.fb [ 663.770344][ T4123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.780471][ T4123] usb 1-1: config 0 descriptor?? [ 663.827713][ T4123] usbtouchscreen: probe of 1-1:0.16 failed with error -12 [ 664.027032][ T4123] usb 1-1: USB disconnect, device number 44 [ 664.554027][ T3382] ssu100: probe of 6-1:0.139 failed with error -71 [ 664.565174][ T3382] usb 6-1: USB disconnect, device number 21 [ 664.813467][ T4123] usb 1-1: new high-speed USB device number 45 using dummy_hcd 20:15:40 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0188c20006007356c37881d0bb3e2c258b0685079f"], 0x0, 0x17}, 0x20) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 20:15:40 executing program 4: r0 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100), 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r5, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r6 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x93, 0x80000) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f00000001c0)) r7 = socket$inet6(0xa, 0x400200000001, 0x0) dup(r7) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x146, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r8, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r7, r8, 0x0, 0x8000fffffffe) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000240)) socket$key(0xf, 0x3, 0x2) 20:15:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:15:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0x3475745ac5227fe9, &(0x7f0000000040)={0x0, 0x1c9c380}) [ 665.157516][T20483] device nr0 entered promiscuous mode [ 665.213510][ T4123] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 665.221955][ T4123] usb 1-1: config 0 has no interface number 0 [ 665.228386][ T4123] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ab.fb [ 665.238658][ T4123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:15:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) [ 665.346817][ T4123] usb 1-1: config 0 descriptor?? 20:15:40 executing program 5: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 20:15:40 executing program 2: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000180)) 20:15:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@del={0xe0, 0x11, 0x1, 0x0, 0x0, {{'gcm(des3_ede-asm)\x00'}}}, 0xe0}}, 0x0) [ 665.398140][ T4123] usbtouchscreen: probe of 1-1:0.16 failed with error -12 [ 665.596505][ T3382] usb 1-1: USB disconnect, device number 45 20:15:41 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000021eeaa08b5192100dc40092a000109021b00010000000009040000019352a500090501dc15202a9c3d0428fde70000000600950fb6b0404d95237b214f36324d98ea91ff2bbee2ecaed06e54"], 0x0) 20:15:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @remote}}, 0xff, 0x7096, 0x5, 0x6637, 0x8}, &(0x7f0000000280)=0x98) 20:15:41 executing program 1: r0 = socket(0x10, 0x400000000080803, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 20:15:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16], 0x3c5) shutdown(r0, 0x1) 20:15:41 executing program 2: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000180)) [ 666.168716][T20512] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.1'. 20:15:41 executing program 2: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000180)) [ 666.220866][T20518] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.1'. 20:15:41 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x50d060000) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000180)={0xfff, 0x0, 0xffffffff, 0x3, 0x80, "3bfebd0d0074a32a42b5630d219e294ed36b6f", 0x0, 0x5}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 20:15:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f66696c65300ad1266d12e95afed85a1bf38a2f1b4ba88686b1d7eefe93e8a0dc000000000000000000"], 0x2e) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r1, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66697371cb6939730200696e75787d6c3177ee76440ad2dedc6f5c20026465762f61646900000000000000"], 0x30) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "78f5515a7c707405446c211eff288b6388f1aad20378c63e03289b82514635002508f9"}, 0x2e) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3421202e2f66696c65300ab74ad88b46abd07b533304f2ab780c44c96504b78bd0aa77ca59a86aaf496f4bfd99d8"], 0x2e) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 20:15:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r2 = socket$inet6(0xa, 0x400200000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:41 executing program 5: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) [ 666.479557][ T3382] usb 1-1: new high-speed USB device number 46 using dummy_hcd 20:15:41 executing program 2: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000180)) 20:15:41 executing program 1: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) [ 666.723716][ T3382] usb 1-1: Using ep0 maxpacket: 8 [ 666.994618][ T3382] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 667.004049][ T3382] usb 1-1: New USB device strings: Mfr=9, Product=42, SerialNumber=0 [ 667.012314][ T3382] usb 1-1: Product: syz [ 667.016713][ T3382] usb 1-1: Manufacturer: syz [ 667.025478][ T3382] usb 1-1: config 0 descriptor?? [ 667.360431][ T3382] usb 1-1: USB disconnect, device number 46 [ 668.033508][ T3945] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 668.273447][ T3945] usb 1-1: Using ep0 maxpacket: 8 [ 668.513613][ T3945] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 668.523079][ T3945] usb 1-1: New USB device strings: Mfr=9, Product=42, SerialNumber=0 [ 668.531672][ T3945] usb 1-1: Product: syz [ 668.536005][ T3945] usb 1-1: Manufacturer: syz [ 668.542080][ T3945] usb 1-1: config 0 descriptor?? [ 668.883785][ T3945] usb 1-1: USB disconnect, device number 47 20:15:44 executing program 0: unshare(0x400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r0, 0x0, &(0x7f0000000000)=0x259) 20:15:44 executing program 1: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 20:15:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind$tipc(r2, 0x0, 0x0) 20:15:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x40002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:44 executing program 5: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 20:15:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 20:15:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x28, 0x1e, 0x301, 0x0, 0x0, {0xffffff15}, [@nested={0x14, 0x4, [@generic="0a19efb83b0ea142a7aab696821a9f37"]}]}, 0x28}}, 0x0) 20:15:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x40002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1d1003, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr="78f9892847ac8fcd3cb571ff06572d45"}], 0x1c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x822a66ba74f420cb}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a8, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa75}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ad}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x2}, 0x800) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) fallocate(r4, 0x4, 0x3, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r7, 0x0, 0x2, [0x9, 0x1ff]}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r8, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) 20:15:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000000)=0x347) 20:15:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) [ 669.801588][ T3945] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 669.816395][T20594] Enabling of bearer rejected, failed to enable media [ 669.847531][ T3945] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on sz1 20:15:44 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000840)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "67e709", 0x10, 0x67, 0x0, @empty, @rand_addr="fc6b2603e177b14550bd88995996ca27", {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "632985", 0x0, '\n2<'}}}}}}}, 0x0) 20:15:45 executing program 1: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 20:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x40002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 20:15:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe0300000905050209000000000905071e1800000000"], 0x0) 20:15:45 executing program 5: epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 20:15:45 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/539], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$hidraw(r0, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 20:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x40002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$FS_IOC_GETFLAGS(r1, 0xb701, 0x0) [ 670.513534][ T4123] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 670.582004][ T3382] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 670.584855][T20597] Enabling of bearer rejected, failed to enable media [ 670.598920][ T3382] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on sz1 [ 670.634579][ T3945] usb 3-1: new high-speed USB device number 66 using dummy_hcd 20:15:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x0, "cf87f96f"}, @local=@item_4={0x3, 0x2, 0x0, "c4eb48fd"}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @local, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) 20:15:45 executing program 4: getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104080200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x38}}, 0x4000000) write(r1, &(0x7f00000001c0)="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", 0x11c) [ 670.767253][ T4123] usb 1-1: Using ep0 maxpacket: 16 [ 670.894030][ T4123] usb 1-1: config index 0 descriptor too short (expected 58986, got 36) [ 670.902723][ T4123] usb 1-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 670.911941][ T4123] usb 1-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 670.921364][ T4123] usb 1-1: config 161 has no interface number 0 [ 670.927852][ T4123] usb 1-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 670.937881][ T4123] usb 1-1: config 161 interface 8 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 24 [ 670.948256][ T4123] usb 1-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 670.957484][ T4123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.966772][ T3945] usb 3-1: Using ep0 maxpacket: 8 [ 671.018047][ T4123] usbtmc 1-1:161.8: bulk endpoints not found [ 671.043607][T12078] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 671.086173][ T3945] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 671.094551][ T3945] usb 3-1: config 0 has no interface number 0 [ 671.100775][ T3945] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 671.112960][ T3945] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 671.124655][ T3945] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb 20:15:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_cred(r0, 0x1, 0x3d, &(0x7f00000001c0), 0xc) [ 671.133884][ T3945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:15:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0xfe, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="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", 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) [ 671.223000][ T3382] usb 1-1: USB disconnect, device number 48 20:15:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r4, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000001c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280013000c000100761b3a0a7c83cc6cef0002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r9, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', r9}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r11, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r13, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet_mreqn(r13, 0x0, 0x75, &(0x7f0000000780)={@loopback, @dev, 0x0}, &(0x7f00000007c0)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000800)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000840)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) accept4$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ac0)=0x14, 0x1000) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r22, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r22, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r26, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r26, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={0x0, @remote, @dev}, &(0x7f0000000b40)=0xc) r28 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r28, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r28, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getpeername$packet(r28, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000bc0)=0x14) r30 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r30, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r30, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r30, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000dc0)=0xe8) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r32, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r35, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) r36 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r36, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x12) write(r36, &(0x7f0000000080)="240000001a005f0014f9f407000904000220000001004be208dc8145aa00000000000000", 0x24) getsockopt$inet6_mreq(r36, 0x29, 0x31, &(0x7f0000000e00)={@empty, 0x0}, &(0x7f0000000e40)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000e80)={@remote, 0x0}, &(0x7f0000000ec0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000100), 0xc, &(0x7f0000001440)={&(0x7f0000000f00)={0x528, r3, 0x532, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r12}, {0x104, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0xbc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x33f}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x84, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r31}, {0x128, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}]}}, {{0x8}, {0xc4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r37}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x50}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x40000004}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) 20:15:46 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="005867e6cf612f52eb067682", 0xc}], 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) 20:15:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 671.350679][ T3945] usb 3-1: config 0 descriptor?? [ 671.356684][T12078] usb 4-1: Using ep0 maxpacket: 16 [ 671.420141][ T3945] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 671.431925][ T3945] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input73 [ 671.503484][T12078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.514836][T12078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.528167][T12078] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 671.537729][T12078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.554199][T12078] usb 4-1: config 0 descriptor?? [ 671.626729][ T3945] usb 3-1: USB disconnect, device number 66 [ 671.655644][ T3945] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 672.004945][ T3382] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 672.029709][T12078] wacom 0003:056A:0027.002C: unknown main item tag 0x0 [ 672.036946][T12078] wacom 0003:056A:0027.002C: unknown main item tag 0x0 [ 672.044985][T12078] wacom 0003:056A:0027.002C: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 672.056237][T12078] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.002C/input/input74 [ 672.077890][T12078] wacom 0003:056A:0027.002C: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 672.230048][T12078] usb 4-1: USB disconnect, device number 16 [ 672.245712][ T3382] usb 1-1: Using ep0 maxpacket: 16 [ 672.363814][ T3382] usb 1-1: config index 0 descriptor too short (expected 58986, got 36) [ 672.372597][ T3382] usb 1-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 672.382587][ T3382] usb 1-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 672.392210][ T3382] usb 1-1: config 161 has no interface number 0 [ 672.398679][ T3382] usb 1-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 672.409001][ T3382] usb 1-1: config 161 interface 8 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 24 [ 672.419303][ T3382] usb 1-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 672.428616][ T3382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.476224][ T3382] usbtmc 1-1:161.8: bulk endpoints not found [ 672.513661][ T3945] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 672.675875][ T3382] usb 1-1: USB disconnect, device number 49 [ 672.753366][ T3945] usb 3-1: Using ep0 maxpacket: 8 [ 672.873803][ T3945] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 672.882171][ T3945] usb 3-1: config 0 has no interface number 0 [ 672.888543][ T3945] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 672.900301][ T3945] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 672.911746][ T3945] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 672.921312][ T3945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.932911][ T3945] usb 3-1: config 0 descriptor?? [ 672.979070][ T3945] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 672.996139][ T3945] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input77 [ 673.013564][T12145] usb 4-1: new high-speed USB device number 17 using dummy_hcd 20:15:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4f89}]}]}, 0x24}}, 0x0) 20:15:48 executing program 4: r0 = socket(0x200040000000015, 0x805, 0x0) getpeername$packet(r0, 0x0, 0x0) 20:15:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="005867e6cf612f52eb067682", 0xc}], 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) 20:15:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 673.206471][ T3945] usb 3-1: USB disconnect, device number 67 [ 673.213782][ T3945] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 673.254266][T12145] usb 4-1: Using ep0 maxpacket: 16 [ 673.321131][T20682] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 673.373534][T12145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.386944][T12145] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.400396][T12145] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 673.410497][T12145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.554274][T12145] usb 4-1: config 0 descriptor?? 20:15:48 executing program 3: unshare(0x24020400) unshare(0x24020400) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r0 = socket$unix(0x1, 0x3, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 20:15:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:15:48 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000024000705000000039ed0a00000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x9, 0x0) 20:15:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="005867e6cf612f52eb067682", 0xc}], 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) 20:15:48 executing program 0: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='nodev\x00', 0x0, r0) 20:15:48 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000012c0), 0x1000) close(r1) [ 673.835361][T20699] sch_fq: defrate 0 ignored. [ 673.854212][T20704] sch_fq: defrate 0 ignored. [ 673.863740][T12145] usbhid 4-1:0.0: can't add hid device: -71 [ 673.870149][T12145] usbhid: probe of 4-1:0.0 failed with error -71 20:15:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="005867e6cf612f52eb067682", 0xc}], 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) [ 673.909737][T12145] usb 4-1: USB disconnect, device number 17 20:15:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:15:49 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xb0N\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x4000080000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}, [@typed={0x8, 0x8, @pid}]}, 0x1c}}, 0x0) [ 674.265921][T20725] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:15:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@migrate={0xb8, 0x21, 0xc21, 0x0, 0x0, {{@in=@local, @in=@loopback}}, [@migrate={0x5c, 0x11, [{@in=@multicast2, @in6=@local}, {@in=@multicast2, @in6=@mcast2}]}, @policy_type={0xc}]}, 0xb8}}, 0x0) 20:15:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) [ 674.367232][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:15:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x76, 0x0, 0x0) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 20:15:49 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000240007050000cccf5b7f8483c3000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000300000008000100753332002800020010000a000700000000000000000000d90b00000000000000000000000000000040000000"], 0x54}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 20:15:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0xcb39, 0x4) recvmmsg(r0, &(0x7f0000006c40)=[{{&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000000540)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000740)=""/60, 0x3c}, {0x0}, {&(0x7f00000007c0)=""/108, 0x6c}], 0x4, &(0x7f0000000880)=""/86, 0x56}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1, &(0x7f0000003340)=""/4096, 0x1000}}], 0x3, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xffffffffffffff0e, 0xb, 0x0, 0x90) 20:15:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c000000140081f87059ae08060c040002026b10400103fe0500018701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) [ 674.710769][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:15:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x2, &(0x7f0000b96f70)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7a}], &(0x7f0000c43000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 20:15:49 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5422, 0x0) 20:15:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x300a}}) 20:15:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @rand_addr="7d0bd84ede574e8a296e1109aef410c7"}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 20:15:50 executing program 1: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xfffffdbf, 0x0, &(0x7f0000000180)) 20:15:50 executing program 2: bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000180)}, 0x20) 20:15:50 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) recvfrom(r0, &(0x7f00000000c0)=""/229, 0xe5, 0x122, 0x0, 0x0) 20:15:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 20:15:50 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x400300, 0x0, 0x0, {0x17, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 20:15:50 executing program 1: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xfffffdbf, 0x0, &(0x7f0000000180)) 20:15:50 executing program 1: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xfffffdbf, 0x0, &(0x7f0000000180)) 20:15:50 executing program 2: r0 = memfd_create(&(0x7f0000000280)='/dev/input/event#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e0000001000000000000000000040000000000000000000000000000000000000100000380002000000000000000300000000000000000000000000e9ffffff00ff0a0000000000000000b58000f800000000000000"], 0x68) write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0}, 0xa0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20:15:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 20:15:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1404000012000dc5000000000000000008001900ef1bb2520c001c00", @ANYRES32, @ANYBLOB="010000000c001c00", @ANYRES32=0x0, @ANYBLOB="0300000008000c0000000000600003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000eaaeeae8e1f10d5290c9aaf77169bdea263272364cab000028001a00213d7cdd08f216965de926e0596c7b74fe80000000000000000000000000001f0a00af232be2d7a48d04ee150744020500ff010000000000000000000000000001000004d57b00000002000000ac14143500000103fa00ff030000176d000000100000ac14142b000000000000000000000000000004d36c000000020000000000004000000000000000000042e957ea3500001e000700000000000100000001000000fe8000000000000000000000000000aa000004d32b0000000a000000fe8000000000000000000000000000230735000001030700010000003f00000006000000ac1414bb000000000000000000000000000004d4ff0000000a000000ac141426000000000000000000000000063500000403000001000080080000000300000000000000000000000000000000000000000004d22b00000000000000e0000001000000000000000000000000073500000000ff00040000000800000001000000ac1414bb000000000000000000000000000004d3be0000001e000000000000000000000000000000000000000635000002030100000000000000000002000000e0000002000000000000000000000000000004d33300000002000000e0000002000000000000000000000000073500000001fa00fffffffff90100000700000000000000000000000000ffff00000001000004d43c00000002000000ac1e0101000000000000000000000000ff3400000300ff00000000009e01000000000000ac1414bb000000000000000000000000000004d26c00000002000000ff020000000000000000000000000001ff3400000201000008000000050000000300000008000b001f00000008010100686d6163286372637431306469662d70636c6d756c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600008a536332be74ac26b44ca7b30da4a42918620ea4bbbf15c1a7febcb445bbd8d292af450e8b0ac87c4b846f3cdd7188f3bfc6e636afee7dd50f491de554bd1468169f381a6e50123a68a1c4d32d781bf8038b7519c98bf64ef257409675c8b08106997e670efe3580fcc77945161f5ae3ddad6892361aba2ac0f7d94fea70efa95254c03a3363b75bb1c72ae183ae124cabdc02de869785a3703b20c55a461cfb93acf5d12db7342cf6afbb44bcc8cb110322f42a710e9e0c6d601f7bda79e6f60000000000"], 0x414}, 0x8}, 0x0) 20:15:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlockall(0x3) [ 675.798865][T20812] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 675.807715][T20812] netlink: 852 bytes leftover after parsing attributes in process `syz-executor.0'. 20:15:50 executing program 4: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xfc00000000000000}}, 0x1c) 20:15:51 executing program 1: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xfffffdbf, 0x0, &(0x7f0000000180)) 20:15:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 20:15:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000001200)=ANY=[@ANYBLOB="20000000010901000000000000000000020000000c00020008000100e0000002"], 0x20}}, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r1, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 20:15:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2286, 0xfffffffffffffffd) 20:15:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7fff, 0x1, 0x0, "17c51909000000000000009ec1ffffffb9dc62c64d960600dd00001d001cfd47"}) 20:15:51 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="20000000680013080000020000000000dd01fe7885b7c700080006001ed3000200000000000001f36b6744254ffe2e4173a157dcd8d2476d0c795bd3bfc6afb407dcd6d43801962cbbb4bc9481b435845656e6f859378cc70000e9a6f60d9485b06f4afb80abb4b50100000c6d757a3cc10ed9abb13edfa687bdd02808a5605d1b73d76ea549e2052287287c9acc0146bef2ec20b74203a1abef015a25a0e00a08d137d84d2864c900000000001300"/194, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x6b7, 0x0) 20:15:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 20:15:51 executing program 2: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @random="9eb00793ffec", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) 20:15:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000100)=0xffb6) 20:15:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x5}, 0xf) delete_module(&(0x7f0000000040)='vmnet0\x00', 0x800) ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) getpid() setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) 20:15:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, 0x0, 0x0) 20:15:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:15:51 executing program 2: clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='io\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") exit(0x0) sendfile(r0, r1, 0x0, 0x3) 20:15:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) 20:15:52 executing program 0: syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 20:15:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x200000000010, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 20:15:52 executing program 5: mknod(&(0x7f0000000040)='./bus\x00', 0x2000000000001003, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0) r1 = epoll_create(0xfd2e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x4}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0) 20:15:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 20:15:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:'}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x10, 0xffffffffffffffff, 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:15:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454dd, &(0x7f0000000340)=""/4096) 20:15:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000005f80)={0xade9, 0x21, 0x0, 0xffffffffffffffff}) lseek(r3, 0x0, 0x0) [ 677.463401][ T3382] usb 1-1: new high-speed USB device number 50 using dummy_hcd 20:15:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454dd, &(0x7f0000000340)=""/4096) 20:15:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1}}], 0x500, 0x0, 0x0) [ 677.703756][ T3382] usb 1-1: Using ep0 maxpacket: 8 [ 677.824055][ T3382] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 677.833496][ T3382] usb 1-1: config 0 has no interface number 0 [ 677.839693][ T3382] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a2.2f [ 677.849767][ T3382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.910125][ T3382] usb 1-1: config 0 descriptor?? [ 678.185693][ T3382] usb 1-1: string descriptor 0 read error: -71 [ 678.192129][ T3382] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 678.199737][ T3382] uvcvideo: No valid video chain found. [ 678.241548][ T3382] usb 1-1: USB disconnect, device number 50 20:15:53 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:15:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454dd, &(0x7f0000000340)=""/4096) 20:15:53 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, r3, 0x5, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) [ 678.924009][ T3382] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 679.163414][ T3382] usb 1-1: Using ep0 maxpacket: 8 [ 679.283518][ T3382] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 679.291697][ T3382] usb 1-1: config 0 has no interface number 0 [ 679.298154][ T3382] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a2.2f [ 679.307333][ T3382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.317308][ T3382] usb 1-1: config 0 descriptor?? [ 679.593754][ T3382] usb 1-1: string descriptor 0 read error: -71 [ 679.600024][ T3382] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 679.608095][ T3382] uvcvideo: No valid video chain found. [ 679.616166][ T3382] usb 1-1: USB disconnect, device number 51 20:15:55 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 20:15:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:'}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x10, 0xffffffffffffffff, 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:15:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:15:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454dd, &(0x7f0000000340)=""/4096) 20:15:55 executing program 3: setrlimit(0x7, &(0x7f00000000c0)) seccomp(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x10200000006}]}) 20:15:55 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:15:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='encrypted\x00', 0xffffffffffffffff) [ 680.263880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.270523][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:15:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 20:15:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x8, 0x7ffffffd) 20:15:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000008000080003, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011003586000000000000000007fffff0", @ANYRES32=r4, @ANYBLOB="00000005000000000c001a000800020000000100"], 0x2c}}, 0x0) [ 680.583656][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.589992][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.596612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.602860][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:15:55 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) recvmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)}, 0x40) 20:15:55 executing program 3: socketpair(0xc421158b5856183f, 0x0, 0x0, &(0x7f0000000080)) 20:15:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a300"}, @local=@item_4={0x3, 0x2, 0x0, "8699b190"}, @global=@item_4={0x3, 0x1, 0x0, "91a069b6"}, @local, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @main=@item_4={0x3, 0x0, 0x0, "77ddb60f"}, @local=@item_4={0x3, 0x2, 0x0, "a4bd7faa"}, @local=@item_4={0x3, 0x2, 0x1, "5d8c3dda"}]}}, 0x0}, 0x0) [ 681.235399][ T3945] usb 1-1: new high-speed USB device number 52 using dummy_hcd 20:15:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:'}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x10, 0xffffffffffffffff, 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:15:56 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00082f00fe8000000000000000000000000000aafe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3a02ad891a260800006d04ff7f1e5ddba2aabae16cbc3be099c072f3124e494f4b62784075a0bc4515ab90883763a5724e86382940ec25bcafb6b14d54b25890eaba249a247c1ebae1e7b394c7ac99914c8261c827692a2c9d8f86a2791bfa8b1da76e23c9017d989270536aab776c71933fef78302bf3373076160ba8040b7cacf93966f2170f2be9b4215a877e03c4bed46d7f48d33fbb"], 0x0) 20:15:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x24, 0x0, 0x0, 0xffff7ffffffff034}, {0x6}]}, 0x10) 20:15:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:15:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 681.493436][ T3945] usb 1-1: Using ep0 maxpacket: 8 20:15:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001}, [@ldst={0xffffffbd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195, 0x0, 0x0, [0xff5fff5f]}, 0x48) 20:15:56 executing program 2: r0 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, 0x0) [ 681.614010][ T3945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.625750][ T3945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 681.640475][ T3945] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 681.649702][ T3945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.805503][ T3945] usb 1-1: config 0 descriptor?? 20:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) [ 682.038151][T21001] pit: kvm: requested 114819 ns i8254 timer period limited to 200000 ns 20:15:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "ad6688b98c311c27e2bba42d27aaf034"}) [ 682.104081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 682.110405][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:15:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 682.184091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 682.190555][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 682.283071][ T3945] wacom 0003:056A:010F.002D: unknown main item tag 0x0 [ 682.319036][ T3945] wacom 0003:056A:010F.002D: hidraw0: USB HID v0.00 Device [HID 056a:010f] on usb-dummy_hcd.0-1/input0 [ 682.438735][T21013] pit: kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 682.455696][T21013] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 682.477031][ T3382] usb 1-1: USB disconnect, device number 52 [ 682.537342][T21013] pit: kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 683.253454][ T3945] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 683.493280][ T3945] usb 1-1: Using ep0 maxpacket: 8 [ 683.613542][ T3945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.624836][ T3945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 683.637844][ T3945] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 683.647407][ T3945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.657221][ T3945] usb 1-1: config 0 descriptor?? [ 683.955108][ T3945] wacom 0003:056A:010F.002E: unknown main item tag 0x0 [ 683.968127][ T3945] wacom 0003:056A:010F.002E: hidraw0: USB HID v0.00 Device [HID 056a:010f] on usb-dummy_hcd.0-1/input0 20:15:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x80}]}}) 20:15:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="800063000000740001eda1671edc2a5443640a789bdd5545b8647dfecf8846d3b941b61b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20:15:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:59 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200010000000009048e0000090088001c92f5fbff6cf942e99998325d7f030bc99a9d0fe2439a218a423ce414b8e68b32c7c4104a1c12e8b513418acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1b5913f87"], 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 20:15:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xfffffffffffffffa, 0x100000) tkill(r2, 0x21) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/179) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:15:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:'}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x10, 0xffffffffffffffff, 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 684.009220][ T3945] usb 1-1: USB disconnect, device number 53 [ 684.138236][T21033] pit: kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 684.204516][T21033] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 684.219401][T21033] pit: kvm: requested 14247 ns i8254 timer period limited to 200000 ns 20:15:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}}, 0x0) [ 684.343668][ T4123] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 684.351675][T12078] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 684.424199][T21041] netlink: 'syz-executor.0': attribute type 21 has an invalid length. 20:15:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:15:59 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff41}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011003599000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a0008000200fd0dcbeda0ca82cbfa413fcf0551000400"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 684.597435][T12078] usb 2-1: Using ep0 maxpacket: 8 [ 684.603053][ T4123] usb 3-1: Using ep0 maxpacket: 8 [ 684.667085][T21044] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 684.713613][T12078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.725654][T12078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.739177][T12078] usb 2-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 684.748691][T12078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:15:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x2000400) syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0xb5, 0x0) pipe(&(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000018c0)={'vlan0\x00', 0x200009813}) fcntl$dupfd(r0, 0x0, r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) [ 684.758415][ T4123] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 684.767164][ T4123] usb 3-1: config 0 has no interface number 0 [ 684.777418][T12078] usb 2-1: config 0 descriptor?? [ 684.795662][T21044] pit: kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 684.845908][T21044] pit: kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 684.853879][ T4123] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 684.863431][ T4123] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 684.871799][ T4123] usb 3-1: Manufacturer: syz [ 684.958664][ T4123] usb 3-1: config 0 descriptor?? [ 685.007612][ T4123] hub 3-1:0.142: ignoring external hub [ 685.021474][ T4123] gl620a 3-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.2-1, Genesys GeneLink, ee:10:a7:86:10:22 20:16:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) [ 685.280812][T12078] hid-generic 0003:1E5E:0313.002F: unknown main item tag 0x0 [ 685.288657][T12078] hid-generic 0003:1E5E:0313.002F: unknown main item tag 0x0 [ 685.296549][T12078] hid-generic 0003:1E5E:0313.002F: unknown main item tag 0x4 [ 685.304450][T12078] hid-generic 0003:1E5E:0313.002F: unknown main item tag 0x4 [ 685.312433][T12078] hid-generic 0003:1E5E:0313.002F: unbalanced collection at end of report description [ 685.322956][T12078] hid-generic: probe of 0003:1E5E:0313.002F failed with error -22 20:16:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 685.333937][ T3382] usb 3-1: USB disconnect, device number 68 [ 685.340312][ T3382] gl620a 3-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.2-1, Genesys GeneLink 20:16:00 executing program 0: unshare(0x28020400) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sync_file_range(r0, 0x0, 0x0, 0x8) 20:16:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x10001, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) [ 685.479131][T12078] usb 2-1: USB disconnect, device number 57 [ 685.507344][T21067] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.3'. [ 685.993863][ T3382] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 686.243411][ T3382] usb 3-1: Using ep0 maxpacket: 8 [ 686.253755][T12078] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 686.363607][ T3382] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 686.371974][ T3382] usb 3-1: config 0 has no interface number 0 [ 686.466586][ T3382] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 686.475926][ T3382] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 686.484401][ T3382] usb 3-1: Manufacturer: syz [ 686.491721][ T3382] usb 3-1: config 0 descriptor?? [ 686.497661][T12078] usb 2-1: Using ep0 maxpacket: 8 [ 686.535102][ T3382] hub 3-1:0.142: ignoring external hub [ 686.546480][ T3382] gl620a 3-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.2-1, Genesys GeneLink, ee:10:a7:86:10:22 [ 686.613973][T12078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.625095][T12078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.641072][T12078] usb 2-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 686.650555][T12078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.674691][T12078] usb 2-1: config 0 descriptor?? [ 686.853758][ T3382] usb 3-1: USB disconnect, device number 69 [ 686.861111][ T3382] gl620a 3-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.2-1, Genesys GeneLink 20:16:02 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200010000000009048e0000090088001c92f5fbff6cf942e99998325d7f030bc99a9d0fe2439a218a423ce414b8e68b32c7c4104a1c12e8b513418acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1b5913f87"], 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 20:16:02 executing program 3: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x269) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16, @time={r5}}) 20:16:02 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 20:16:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 20:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r4, {0xfff7}}}, 0x24}}, 0x0) 20:16:02 executing program 1: unshare(0x400) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) pwrite64(r0, 0x0, 0x0, 0x0) [ 687.155918][T12078] usbhid 2-1:0.0: can't add hid device: -71 [ 687.162140][T12078] usbhid: probe of 2-1:0.0 failed with error -71 [ 687.218116][T12078] usb 2-1: USB disconnect, device number 58 20:16:02 executing program 3: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x269) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16, @time={r5}}) 20:16:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}}, 0x0) 20:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r4, {0xfff7}}}, 0x24}}, 0x0) 20:16:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote, r2}, 0x14) 20:16:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) [ 687.503657][ T4123] usb 3-1: new high-speed USB device number 70 using dummy_hcd 20:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r4, {0xfff7}}}, 0x24}}, 0x0) [ 687.743586][ T4123] usb 3-1: Using ep0 maxpacket: 8 [ 687.886887][ T4123] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 687.895461][ T4123] usb 3-1: config 0 has no interface number 0 [ 687.983819][ T4123] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 687.993549][ T4123] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 688.002075][ T4123] usb 3-1: Manufacturer: syz [ 688.008452][ T4123] usb 3-1: config 0 descriptor?? [ 688.054431][ T4123] hub 3-1:0.142: ignoring external hub [ 688.066345][ T4123] gl620a 3-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.2-1, Genesys GeneLink, ee:10:a7:86:10:22 [ 688.386493][ T4123] usb 3-1: USB disconnect, device number 70 [ 688.393448][ T4123] gl620a 3-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.2-1, Genesys GeneLink 20:16:03 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200010000000009048e0000090088001c92f5fbff6cf942e99998325d7f030bc99a9d0fe2439a218a423ce414b8e68b32c7c4104a1c12e8b513418acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1b5913f87"], 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 20:16:03 executing program 3: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x269) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16, @time={r5}}) 20:16:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x800001, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_procfs(0x0, &(0x7f0000000040)='net/de\xe1\xf1zsmp6\x00') 20:16:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 20:16:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 20:16:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r4, {0xfff7}}}, 0x24}}, 0x0) 20:16:04 executing program 3: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x269) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16, @time={r5}}) 20:16:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x4c}, {0x6, 0x0, 0x0, 0x50000}]}) 20:16:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 20:16:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) [ 689.183396][ T3382] usb 3-1: new high-speed USB device number 71 using dummy_hcd 20:16:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 20:16:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 689.423319][ T3382] usb 3-1: Using ep0 maxpacket: 8 [ 689.544773][ T3382] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 689.553100][ T3382] usb 3-1: config 0 has no interface number 0 [ 689.633906][ T3382] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 689.643327][ T3382] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 689.651606][ T3382] usb 3-1: Manufacturer: syz [ 689.658820][ T3382] usb 3-1: config 0 descriptor?? [ 689.704894][ T3382] hub 3-1:0.142: ignoring external hub [ 689.716246][ T3382] gl620a 3-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.2-1, Genesys GeneLink, ee:10:a7:86:10:22 [ 690.033982][ T4123] usb 3-1: USB disconnect, device number 71 [ 690.040327][ T4123] gl620a 3-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.2-1, Genesys GeneLink 20:16:05 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200010000000009048e0000090088001c92f5fbff6cf942e99998325d7f030bc99a9d0fe2439a218a423ce414b8e68b32c7c4104a1c12e8b513418acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1b5913f87"], 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 20:16:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) 20:16:05 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 20:16:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0xfffffde5, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, r1, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x7, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 20:16:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 20:16:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 20:16:05 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 20:16:05 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x13a7}], 0x2, 0x0, 0xfffffffffffffe8a}, 0x0) 20:16:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x38}}, 0x0) 20:16:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 20:16:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002f1ff0)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x20, 0xb01}, 0x14}}, 0x0) [ 690.763385][ T4123] usb 3-1: new high-speed USB device number 72 using dummy_hcd 20:16:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xeeb0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 691.005029][ T4123] usb 3-1: Using ep0 maxpacket: 8 [ 691.127551][ T4123] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 691.136402][ T4123] usb 3-1: config 0 has no interface number 0 [ 691.213648][ T4123] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 691.223422][ T4123] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 691.232208][ T4123] usb 3-1: Manufacturer: syz [ 691.238805][ T4123] usb 3-1: config 0 descriptor?? [ 691.285435][ T4123] hub 3-1:0.142: ignoring external hub [ 691.296986][ T4123] gl620a 3-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.2-1, Genesys GeneLink, ee:10:a7:86:10:22 [ 691.613915][ T4123] usb 3-1: USB disconnect, device number 72 [ 691.620376][ T4123] gl620a 3-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.2-1, Genesys GeneLink 20:16:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc0a85322, &(0x7f00000000c0)) 20:16:07 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 20:16:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12002, 0x3, @perf_config_ext, 0x4423d, 0x0, 0x0, 0x6, 0x100000000007fff, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@proc={0x10, 0x0, 0xc930, 0x1000400}, 0x3e, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000840)=""/143, &(0x7f0000000340)=0x1d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:16:07 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 20:16:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c00000024000705000000000000000000", @ANYBLOB="00000000ffffffff0000000008000d00000000000800010073667100482400000000080000000000800000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000003f423215a9e47b5f58a5c2fd2d8651d2dc0c819f05b537bcdc12ef193f06c063e1c8b291aa333ea8229482f76bd0b326a0f2de2e5eb45962045c81304c84b97845bf0a548e88e8b0b2475e906e574cb96061e7fa4554f6bcf1be0f974fef92d2cd838603b977ed7df3bf38fd4a2431c24aeed64139f61d91870b6cdb0e"], 0x2}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4c8], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:16:07 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) [ 692.129090][T21281] kvm_hv_set_msr: 34 callbacks suppressed [ 692.129145][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000006 data 0x4d00000000f 20:16:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) [ 692.216267][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003e data 0x4d00000000f 20:16:07 executing program 4: r0 = inotify_init() open(&(0x7f0000003880)='./file0\x00', 0x14104a, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x40204000000b) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40204000000b) r2 = open(&(0x7f0000003880)='./file0\x00', 0x14104a, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14}, 0x14) 20:16:07 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800030800000000a90300000a00000000000000080005000200000000000011e76b6744254ffe2e41730558dcd8d2476d04795bd3bfc6afb407dcb7d413e47863dabf630881b435845656e6f859b78c01d5ece9a6180e9485b06f1ffb80abb4b501000000000c6d757a3cc10ed90ab13edfa687bdd02808a5605d1b73d76ea5497e7de7dbfc83623714f06a048a01228708cc01ec20b742fa91bd1850dec9c8155b51eee533f7005590cb04a9d71300028f1e26f000000000000076dc99f93608000000382b01303c197c9ffa10d6f56c338ff8f6d875051fafaa8a868c88f1379de01931102d0f3f3313643bcafd9757585cb13c7533d00960c3333c59ed940143728147eb2aaaf2e02df8000052a375589fcb4720e9b2147c2e659b16e10a1aa84cbb29cff238d1a9296036eb2b373da86586fec4a08912fefc9576d1f8beaa089014ad40ab7ab3bff3dfe0d38b929bffefd9f2308b97166f2637fd6e592df337354ef56f3787d6a2541d954ed772472a1ff2bc21061ef544257af24b1e48a7a28d7567faf886c4ec4bde2b14731228335c83b2a533cf607f18145046da38d985da9e3dafa4958129e7cd37cb3e135f6bdcedd887268ecdcdb2ba36eab0f14151342f7040765c92c7c3dcd6b6193982d606571f613dc770a38a2af601a5f2fcfe257cfae6d901ff93bc44a935317610d09e6026bb925b59b9603f58d64c703dc03b6f6a6e84dafe6b3a8b7177365d45c10b0dde11806f22523658b13ccb2335f3dd951b74a540e2fa87e85f62d83a39f9fec35ac41bfda56fdee962e6a86be26ee158bbd5b2b465879766181b5b7343cd7c6b5c2ff9ebd9d026cda143e3b30b05f11121321d310d99de474a554434534b62cd8f24eb0a042db9bd206c924edcebb178abc33e88d57b", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0xfe80000000000000, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 692.302745][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000c data 0x4d00000000f [ 692.375993][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000076 data 0x4d00000000f 20:16:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9, 0x1, 'prio\x00'}, {0xd, 0x2, {0x0, "c39fc4fc7b456346f38daebbe791f4c8"}}}]}, 0x48}}, 0x0) [ 692.424097][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000044 data 0x4d00000000f [ 692.468190][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000012 data 0x4d00000000f 20:16:07 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xac, &(0x7f00000000c0), &(0x7f0000000080)=0x4) [ 692.518848][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007c data 0x4d00000000f 20:16:07 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xffffffffffffff1f) recvmmsg(r0, &(0x7f0000008380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) [ 692.564482][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004a data 0x4d00000000f [ 692.594111][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 692.604353][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000018 data 0x4d00000000f 20:16:07 executing program 4: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0x337, 0x0) 20:16:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 20:16:07 executing program 2: r0 = gettid() sigaltstack(&(0x7f00005ef000/0x4000)=nil, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 692.747169][T21281] kvm [21280]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000050 data 0x4d00000000f 20:16:07 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @random="9eb00793ffec", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@multicast2]}, {[@loopback]}]}]}}}}}}}, 0x0) 20:16:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 20:16:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x1a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:16:08 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x80000040045010, 0xfffffffffffffffd) 20:16:08 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 20:16:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) unshare(0x20400) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af25, &(0x7f0000000080)={0x0, 0x7}) 20:16:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000240)=0x84) 20:16:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) unshare(0x20400) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af25, &(0x7f0000000080)={0x0, 0x7}) 20:16:08 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) 20:16:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x48, 0x21, 0x20, 0x17ef, 0x7203, 0xc682, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x87, 0x81, 0x4e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x97}, 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:16:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000009700)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}, @ip_tos_u8={{0x11}}], 0x48}}, {{&(0x7f0000000680)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)}, {&(0x7f00000007c0)="560072654645fea9d766", 0xfd05}, {&(0x7f0000000800)="d8fc670df6fca3e042ca89d58b0bf0b3eebfbb73d08a20330b", 0x19}, {&(0x7f0000000840)="a74eccab4abccfa722", 0x9}, {&(0x7f0000000040)="4992280587c2d312f1039f19e4e1d411465b199920ac87f01d14bb274a376db2403ea649edf83dabbfdfcbd0f860ce4cd576998470709699fb1fb3de28fcd23d893de8b30cf88185fc0b5b62b6673ce1b383ce1bcb8d57098e5545415c052f0e5a218da6c78a52c1", 0x68}, {&(0x7f0000000980)="63ee4965c101dfd1a7c3fc7165e89b748a283bcf48ed753fb8536eb3d3b6ecb58ce4fcfa98aa67bd2ce12ea0aeb885d198246c15a01bdc89821346179828737ea7b427f7bfd3ef484f1cd7649bfd3a22981cc63da41005d7000b387d16cee6fe91586a64bf3c486d15a8e9f4c74bea72c537513a90bdf2f5f6c0d8576afdff84e85c7c8e5b829a41c4b3e2d605f083de40794845a280305f1a4a2d712065ead423e0ee30aaabc83feb2759f7a366ac73933404cc9bf60af6d2cd2221ad8618e4d3689f0e9032c95990b3a23712d98b329908097560", 0xd5}, {&(0x7f0000000a80)="5bc18dd4e882d1535dcbd9d46a5471329fab7aa50a8d609a8e35f3b09f9caef61fdb17f3019a457921bafba57d1d873a01f2b8fd5321f3a0311919d83e9d9d56e5f92202fe59667d1434c9c3b3", 0x4d}, {&(0x7f0000000b00)="d4e80f846c0b029d9e15e4f8593e199330a4914cd941ab70363289f5788c5d96d24ae4abfb8e9595830577c9a5e01ff5c043efe33a4b567c0c6de5f608dc", 0x3e}, {&(0x7f0000000b80)="04e1e5330a28d347797b6d861de5da7ac29c18ad5727b48f28896f1e50a14c863a5ba895b7e84c4b9d776125cf35bf95eb8765829b2360a4911d11d82bdb6a8a940fe388284379dd45f804a49b669716bed5fac9f45e37c40198e06021948d3d24bc461bde18c55d5a4e6596607fee2dedfa64801e8f0e6fe868555e3b44f1beb02b4fc06afb422bb3c543d16438ca6979bd29a286b10937dcdeb8a0825ff8afd7bb15cd852a5960a567cd47d7433a0cb1aa0bd4e0101769ee9d9aeda84d97f9c31369bb94063e50ed778095b77ba1061b5f932571d550b21257fc3d6231bf4ca9e654f3eacc937236382d10bd9075672ac9733a0bc9ba694a", 0xf9}], 0x9, &(0x7f0000000d40)=[@ip_retopts={{0x10}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x17, 0x7, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @cipso={0x86, 0xf, 0x0, [{0x0, 0x9, "d556320d30b422"}]}, @ra={0x94, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x20}}], 0x3, 0x0) 20:16:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r3, 0x107, 0x40000000000e, &(0x7f0000651000)=""/240, &(0x7f0000000040)=0x4) 20:16:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x7b, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xae80) 20:16:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) unshare(0x20400) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af25, &(0x7f0000000080)={0x0, 0x7}) 20:16:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 20:16:08 executing program 2: unshare(0x600) r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x2285, 0x0) [ 693.746639][ T4123] usb 6-1: new high-speed USB device number 22 using dummy_hcd 20:16:08 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000097903010cf10035562920000000109022400010000000009040700023330be0009050f02000080000009050e1a0012000000"], 0x0) 20:16:08 executing program 4: unshare(0x20600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x81) 20:16:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) unshare(0x20400) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af25, &(0x7f0000000080)={0x0, 0x7}) 20:16:08 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) close(r1) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006}]}) dup2(r0, r1) [ 693.993781][ T4123] usb 6-1: Using ep0 maxpacket: 32 20:16:09 executing program 0: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x26dd0ef5ef505b28, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001400010900000000000000000aebffff0d00000014000200fbffffffffffe76042eae213c48da5aae3611acb163ba89e304ba838862c0b056e842324b960fb0f7f50000945fccede776000026c"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 694.113968][ T4123] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 694.122361][ T4123] usb 6-1: config 0 has no interface number 0 [ 694.128820][ T4123] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 694.138091][ T4123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.173537][ T3382] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 694.187801][ T4123] usb 6-1: config 0 descriptor?? [ 694.201729][ T31] audit: type=1326 audit(1571084169.245:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21395 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 694.433502][ T3382] usb 4-1: Using ep0 maxpacket: 16 [ 694.553716][ T3382] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 694.562003][ T3382] usb 4-1: config 0 has no interface number 0 [ 694.568552][ T3382] usb 4-1: config 0 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 694.578579][ T3382] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=92.62 [ 694.588047][ T3382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.597580][ T3382] usb 4-1: config 0 descriptor?? [ 694.640121][ T3382] vmk80xx 4-1:0.7: driver 'vmk80xx' failed to auto-configure device. [ 694.838291][T12078] usb 4-1: USB disconnect, device number 18 [ 695.005365][ T31] audit: type=1326 audit(1571084170.055:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21395 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 695.094092][ T4123] asix 6-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.104482][ T4123] asix 6-1:0.84 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 695.137906][ T4123] asix 6-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.163800][ T4123] asix 6-1:0.84 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 695.175099][ T4123] asix 6-1:0.84 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 695.215260][ T4123] asix: probe of 6-1:0.84 failed with error -71 [ 695.226953][ T4123] usb 6-1: USB disconnect, device number 22 [ 695.613669][T12078] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 695.853404][ T4123] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 695.863826][T12078] usb 4-1: Using ep0 maxpacket: 16 [ 695.983967][T12078] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 695.992291][T12078] usb 4-1: config 0 has no interface number 0 [ 695.998885][T12078] usb 4-1: config 0 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 696.008811][T12078] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=92.62 [ 696.018790][T12078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.028515][T12078] usb 4-1: config 0 descriptor?? [ 696.080818][T12078] vmk80xx 4-1:0.7: driver 'vmk80xx' failed to auto-configure device. [ 696.093743][ T4123] usb 6-1: Using ep0 maxpacket: 32 [ 696.213502][ T4123] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 696.221677][ T4123] usb 6-1: config 0 has no interface number 0 [ 696.228080][ T4123] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 696.237406][ T4123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.247206][ T4123] usb 6-1: config 0 descriptor?? [ 696.276405][ T3382] usb 4-1: USB disconnect, device number 19 20:16:11 executing program 1: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 20:16:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000240)=0x8, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000) 20:16:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@can={0x1d, r2}, 0x80) 20:16:11 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) close(r1) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006}]}) dup2(r0, r1) 20:16:11 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@dev, 0x0, r2}) [ 696.604254][ T4123] asix 6-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 696.614706][ T4123] asix: probe of 6-1:0.84 failed with error -71 [ 696.699801][ T4123] usb 6-1: USB disconnect, device number 23 20:16:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) [ 696.737216][ T31] audit: type=1326 audit(1571084171.785:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21417 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 20:16:11 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xa2) 20:16:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="da", 0x1}], 0x1}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 20:16:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x15) 20:16:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 20:16:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) sendto$inet6(r0, &(0x7f0000000180)='Y', 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) close(r0) 20:16:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 20:16:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="da", 0x1}], 0x1}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 20:16:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) sendto$inet6(r0, &(0x7f0000000180)='Y', 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) close(r0) 20:16:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffffffffffff, 0x801}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x88d82) write(r1, &(0x7f0000000180)="2f94", 0x2) [ 697.338430][T21457] : renamed from eql 20:16:12 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) close(r1) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006}]}) dup2(r0, r1) 20:16:12 executing program 4: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x22, &(0x7f0000000040)={0x0, 0x5}, 0x10) 20:16:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="da", 0x1}], 0x1}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 20:16:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x1}]]]}}}]}, 0x3c}}, 0x0) 20:16:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) sendto$inet6(r0, &(0x7f0000000180)='Y', 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) close(r0) 20:16:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3ff, 0x4) getsockopt$sock_buf(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 20:16:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 697.628868][T21475] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 20:16:12 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3, 0x1c) 20:16:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="da", 0x1}], 0x1}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 697.730907][ T31] audit: type=1326 audit(1571084172.775:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21483 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 20:16:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) sendto$inet6(r0, &(0x7f0000000180)='Y', 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) close(r0) 20:16:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x80044dfd, &(0x7f0000000340)) 20:16:12 executing program 4: symlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') unlink(&(0x7f0000000b80)='./file0/file0\x00') 20:16:13 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) close(r1) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006}]}) dup2(r0, r1) 20:16:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') fchmod(r0, 0x0) 20:16:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2f9, 0x0, &(0x7f0000000280)=[@acquire, @acquire, @request_death, @release, @decrefs, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x0, 0x0}) 20:16:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000a00000/0x600000)=nil, 0xcf8776cd51a5c5be) shmctl$IPC_RMID(r1, 0x0) 20:16:13 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) 20:16:13 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xff60) [ 698.607622][T21511] binder: 21510:21511 ioctl c0306201 20000080 returned -14 [ 698.608311][ T31] audit: type=1800 audit(1571084173.655:41): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 [ 698.707177][ T31] audit: type=1800 audit(1571084173.705:42): pid=21521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 20:16:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socket$inet6(0xa, 0x802, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x0, 0x0) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x32001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000480)=0x8) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x401, r0, &(0x7f0000000340)="6aee8d", 0x3}, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:16:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2f9, 0x0, &(0x7f0000000280)=[@acquire, @acquire, @request_death, @release, @decrefs, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x0, 0x0}) 20:16:13 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:16:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000007c0)=""/108, 0x6c}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000840)=""/96, 0x60}, {&(0x7f00000008c0)=""/64, 0x40}], 0x5, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 698.758584][ T31] audit: type=1326 audit(1571084173.785:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21524 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 698.933605][T21538] binder: 21537:21538 ioctl c0306201 20000080 returned -14 20:16:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2f9, 0x0, &(0x7f0000000280)=[@acquire, @acquire, @request_death, @release, @decrefs, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x0, 0x0}) 20:16:14 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0x0) [ 699.131419][T21546] binder: 21544:21546 ioctl c0306201 20000080 returned -14 20:16:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x4000000000006, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 20:16:14 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:16:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) 20:16:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2f9, 0x0, &(0x7f0000000280)=[@acquire, @acquire, @request_death, @release, @decrefs, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x0, 0x0}) 20:16:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socket$inet6(0xa, 0x802, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x0, 0x0) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x32001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000480)=0x8) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x401, r0, &(0x7f0000000340)="6aee8d", 0x3}, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:16:14 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) [ 699.667679][T21559] binder: 21558:21559 ioctl c0306201 20000080 returned -14 20:16:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000f00001c"]}) 20:16:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000000000141042, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000500)={0x43}, 0x43) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 20:16:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r2, 0x5, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 20:16:15 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:16:15 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200000005, 0x0) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000200)) 20:16:15 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = getpid() ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) rt_tgsigqueueinfo(0x0, r2, 0x800000000015, &(0x7f0000000080)={0x9, 0x0, 0x1}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:16:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x0, 0x100000001, 0x800000000004, {0x1, @raw_data="2e326ad4d6de1c73c5ff6859c54bba23e7abe3c83d4e61fd399ad27fbfc521dfab96f615bd233fc9b7ed5043943f226af00bf1841f47a75652ebe91ca752f436589dafbc49b3a932492a954514195ab5d090d3615e4cf370bf2a99b3b1f489d6217f08e4844ebcf630fa9f029fe199c93fcacb80d868b5edc8a7d088727af50ba14bd85f85fe6289b211f7078aeaedd88327c0a649cb70a0588e09f70b0309740a6e427c2bbfc4b432f369ce300a26ce45e64dc63a2e002211c5d1dacc87917e8c19ac392b51504d"}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000006c0)={0x1, @sliced={0x0, [0x3]}}) 20:16:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0xb00, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0xe, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 700.201791][ T31] audit: type=1800 audit(1571084175.245:44): pid=21594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="ramfs" ino=83001 res=0 [ 700.214329][T21597] vim2m vim2m.0: vidioc_s_fmt queue busy 20:16:15 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:16:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x8000001040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x5) execveat(r3, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 20:16:15 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socket$inet6(0xa, 0x802, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x0, 0x0) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x32001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000480)=0x8) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x401, r0, &(0x7f0000000340)="6aee8d", 0x3}, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:16:15 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1b9}, 0x0, 0x0) 20:16:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0x1, 0x4004084, 0x0, 0x0) 20:16:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x9, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 20:16:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x8000001040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x5) execveat(r3, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) [ 700.797792][T21624] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. 20:16:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x2b3, &(0x7f0000bd7000)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x3, 0x0, 0x0, {{@in6=@mcast1}, @in=@remote, {@in6=@mcast1, @in6=@remote}, {{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={[], [], @dev}}, 0x0, @in6, 0x0, 0x7}]}]}, 0x16c}}, 0x0) 20:16:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x8000001040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x5) execveat(r3, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) [ 700.914920][T21636] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. 20:16:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = getpid() ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) rt_tgsigqueueinfo(0x0, r2, 0x800000000015, &(0x7f0000000080)={0x9, 0x0, 0x1}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:16:16 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1b9}, 0x0, 0x0) 20:16:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x8000001040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x5) execveat(r3, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 20:16:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 20:16:16 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @dev, @link_local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) [ 701.455026][T21663] input: syz1 as /devices/virtual/input/input84 20:16:16 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socket$inet6(0xa, 0x802, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x0, 0x0) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x32001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000480)=0x8) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x401, r0, &(0x7f0000000340)="6aee8d", 0x3}, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:16:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 20:16:16 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25fe8000000000000005baa68754a30000000002000000000000000000000000002c00", 0x5ac}], 0x1}, 0x900) 20:16:16 executing program 4: syz_usb_connect(0x0, 0x15f, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 20:16:16 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1b9}, 0x0, 0x0) 20:16:17 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25fe8000000000000005baa68754a30000000002000000000000000000000000002c00", 0x5ac}], 0x1}, 0x900) 20:16:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000a07fff)) [ 702.183462][T12078] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 702.435402][T12078] usb 5-1: Using ep0 maxpacket: 16 20:16:17 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = getpid() ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) rt_tgsigqueueinfo(0x0, r2, 0x800000000015, &(0x7f0000000080)={0x9, 0x0, 0x1}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:16:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 20:16:17 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25fe8000000000000005baa68754a30000000002000000000000000000000000002c00", 0x5ac}], 0x1}, 0x900) 20:16:17 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1b9}, 0x0, 0x0) 20:16:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000a07fff)) [ 702.553844][T12078] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 702.562168][T12078] usb 5-1: config 0 has no interface number 0 [ 702.568656][T12078] usb 5-1: config 0 interface 30 altsetting 255 endpoint 0x4 has an invalid bInterval 109, changing to 10 [ 702.580256][T12078] usb 5-1: config 0 interface 30 altsetting 255 endpoint 0xD has invalid maxpacket 907, setting to 64 [ 702.591546][T12078] usb 5-1: config 0 interface 30 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 702.602508][T12078] usb 5-1: config 0 interface 30 altsetting 255 endpoint 0xC has invalid maxpacket 715, setting to 64 [ 702.613911][T12078] usb 5-1: config 0 interface 30 has no altsetting 0 [ 702.620736][T12078] usb 5-1: New USB device found, idVendor=5451, idProduct=1088, bcdDevice=10.ea [ 702.629990][T12078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:16:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000a07fff)) [ 702.672102][T12078] usb 5-1: config 0 descriptor?? 20:16:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 702.748316][T12078] usbhid 5-1:0.30: couldn't find an input interrupt endpoint 20:16:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000a07fff)) [ 702.917617][ T3382] usb 5-1: USB disconnect, device number 31 [ 703.693439][T12078] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 703.933569][T12078] usb 5-1: Using ep0 maxpacket: 16 [ 704.053650][T12078] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 704.061941][T12078] usb 5-1: config 0 has no interface number 0 [ 704.068318][T12078] usb 5-1: config 0 interface 30 altsetting 255 endpoint 0x4 has an invalid bInterval 109, changing to 10 [ 704.079945][T12078] usb 5-1: config 0 interface 30 altsetting 255 endpoint 0xD has invalid maxpacket 907, setting to 64 [ 704.091274][T12078] usb 5-1: config 0 interface 30 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 704.103065][T12078] usb 5-1: config 0 interface 30 altsetting 255 endpoint 0xC has invalid maxpacket 715, setting to 64 [ 704.114599][T12078] usb 5-1: config 0 interface 30 has no altsetting 0 [ 704.121366][T12078] usb 5-1: New USB device found, idVendor=5451, idProduct=1088, bcdDevice=10.ea [ 704.130823][T12078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.141136][T12078] usb 5-1: config 0 descriptor?? [ 704.188599][T12078] usbhid 5-1:0.30: couldn't find an input interrupt endpoint [ 704.385210][T12078] usb 5-1: USB disconnect, device number 32 20:16:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 20:16:19 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25fe8000000000000005baa68754a30000000002000000000000000000000000002c00", 0x5ac}], 0x1}, 0x900) 20:16:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 20:16:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x10\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:16:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = getpid() ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) rt_tgsigqueueinfo(0x0, r2, 0x800000000015, &(0x7f0000000080)={0x9, 0x0, 0x1}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 20:16:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 704.852811][T21735] input: syz1 as /devices/virtual/input/input86 20:16:20 executing program 5: r0 = memfd_create(&(0x7f0000000840)='/dev/keychord\x00\xc7\xba\xb3\x9ba\x1eR\xf2\t\xcax\x00%\xd9\xd0f\xc5U\xd5\xacL\x0f\xd7\x96\x15\x92\xf6<\xd9\xad\x8ck\n\x05=\x9eb\xb0_\xdf\xef\x165-\x14\xa3\fY9\xae\xafA\xaal\xa5\xa6\xbd\x05\x00\x00(V;J\xeap\x05\x00H\xfe\xbcF\xde\x8c\x05\aDzy#\x95\xa4c\x958\xe7\xf0;k~PoW\xe3J\xa5\x8d\x93\xcbc\x06\x99\x90\xbe\xda5v\xf0\x00\xf4a\x9d\a\xbfd\xb5\xacR\x8a6E\x01r\xd9W\xc9\xb4h\x95\x8f \xd0\x98X\xf4\xf7\xc6\x8cBd\x95\x8b\xeb\xbd\x80$\xdfM8H\x11\x8a\xf3\xd1\xf2\xa7xc\xf1\xe6\xd6\xdfc\xdd\xbc<\x83\xbbN\xb7\xf6&\xa7\xa7\xff=J\xc9\v\xf7mi\vw\x9a\x00'/210, 0x0) lseek(r0, 0x0, 0x3) 20:16:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x6e0}]}) 20:16:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 20:16:20 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 20:16:20 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) 20:16:20 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a290930206040000000001021209003900090035000c030100000019000b4023dc0b00000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060c3a62645656", 0x55}], 0x1}, 0x0) 20:16:20 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 20:16:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) 20:16:20 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f0000a07fff)) 20:16:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 20:16:21 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 20:16:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 20:16:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x305}, 0x14}}, 0x0) 20:16:21 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000150007841dfffd946f6105000a0081001f03fe050400080008000b000400ff7e", 0x24}], 0x1}, 0x0) 20:16:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) fallocate(r1, 0x3, 0x0, 0x5) 20:16:21 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00000000000000000000400500ef000000e7fc4b0900b80000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000008601000000ffffffc40040"]) 20:16:21 executing program 4: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100080044100, &(0x7f0000000000)) 20:16:21 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 20:16:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x305}, 0x14}}, 0x0) 20:16:21 executing program 1: syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) 20:16:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x81}) 20:16:21 executing program 4: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100080044100, &(0x7f0000000000)) 20:16:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x305}, 0x14}}, 0x0) 20:16:21 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 20:16:21 executing program 3: timer_create(0x0, &(0x7f0000000480)={0x0, 0x40000000012, 0x0, @thr={&(0x7f0000000380), &(0x7f0000000180)}}, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 706.734307][T12078] usb 2-1: new low-speed USB device number 59 using dummy_hcd 20:16:21 executing program 4: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100080044100, &(0x7f0000000000)) 20:16:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x305}, 0x14}}, 0x0) 20:16:21 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000000)='\x02\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01', 0x14, 0x0) 20:16:22 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 20:16:22 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "e5"}, 0x2) 20:16:22 executing program 4: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100080044100, &(0x7f0000000000)) [ 707.145897][T12078] usb 2-1: config 1 has an invalid interface number: 165 but max is 0 [ 707.154354][T12078] usb 2-1: config 1 has no interface number 0 [ 707.160554][T12078] usb 2-1: config 1 interface 165 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 707.170793][T12078] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 707.180054][T12078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.328674][T12078] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 707.336032][T12078] uvcvideo: No valid video chain found. [ 707.528648][ T3382] usb 2-1: USB disconnect, device number 59 [ 708.313370][T12078] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 708.673513][T12078] usb 2-1: config 1 has an invalid interface number: 165 but max is 0 [ 708.681942][T12078] usb 2-1: config 1 has no interface number 0 [ 708.688385][T12078] usb 2-1: config 1 interface 165 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 708.699023][T12078] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 708.708246][T12078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.757869][T12078] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 708.765071][T12078] uvcvideo: No valid video chain found. [ 708.956733][T12078] usb 2-1: USB disconnect, device number 60 20:16:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x40045402) 20:16:24 executing program 0: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mprotect(&(0x7f00000c9000/0x4000)=nil, 0x4000, 0x2) mlock(&(0x7f00007df000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:16:24 executing program 2: r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x1) 20:16:24 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f427e00000000000000000002000000", 0x38}]) 20:16:24 executing program 3: semop(0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffffa}], 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x80}, {}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) 20:16:24 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r0}) 20:16:24 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0x8a, 0x8f, 0x67, 0x20, 0x56b3, 0xc414, 0xdf96, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x0, 0xe0, 0x1, 0x3}}]}}]}}, 0x0) 20:16:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r5, 0x8004ae98, 0x70f000) 20:16:24 executing program 1: unshare(0x400) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) fcntl$setflags(r0, 0x2, 0x0) 20:16:24 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x200000008002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x02\x00\x1a\x00\x00\x00\x00\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85\x00'}) write$P9_RSTATu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="070100007d00000000b90000000000000000000000000000000000000000000000000000000000000000000000000000fa003e00717565756531000000000000d8a4fe3500"/84], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x23, 0x0, 0x0, @tick=0x3, {}, {}, @connect}], 0xffffff76) [ 709.953381][T12078] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 710.193408][T12078] usb 3-1: Using ep0 maxpacket: 32 [ 710.313702][T12078] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 710.322053][T12078] usb 3-1: config 0 has no interface number 0 [ 710.328728][T12078] usb 3-1: New USB device found, idVendor=56b3, idProduct=c414, bcdDevice=df.96 [ 710.338411][T12078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.348411][T12078] usb 3-1: config 0 descriptor?? [ 710.395912][T12078] usb 3-1: bad CDC descriptors [ 710.596950][ T3382] usb 3-1: USB disconnect, device number 73 [ 711.363477][ T3382] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 711.623396][ T3382] usb 3-1: Using ep0 maxpacket: 32 [ 711.743557][ T3382] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 711.751720][ T3382] usb 3-1: config 0 has no interface number 0 [ 711.758162][ T3382] usb 3-1: New USB device found, idVendor=56b3, idProduct=c414, bcdDevice=df.96 [ 711.767372][ T3382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.778120][ T3382] usb 3-1: config 0 descriptor?? [ 711.825631][ T3382] usb 3-1: bad CDC descriptors [ 712.025669][ T3382] usb 3-1: USB disconnect, device number 74 20:16:32 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "e5"}, 0x2) 20:16:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1e0, 0x0, [], &(0x7f0000000080)={0x0, 0x0, [], @p_u32=0x0}}) 20:16:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 20:16:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xa400295c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r3, r4) 20:16:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 20:16:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) 20:16:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000e40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x45c) 20:16:33 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e629b02cda6d3ae0359817c53841c157945f7ea2aeba908227b92e995eceb6039d7a81bc3efc82e30d345cbc9a14e11dca36ea2ed921d3740210f66f32e73b897cca2b1550053d8a4cc76edbeb16c1e4fd678792d290e73cc1b159b8f5b611918c1f53a483c1cf0554189f553a670f26f34d544f1dea25724c7f895d2f1f1669c902e24d6169d941fbee0d1c74de251424cf0baac37166fc1ef3c64b249ddeff6800"/348], 0x3c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20:16:33 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000005}) r2 = fcntl$dupfd(r1, 0x0, r0) ppoll(&(0x7f0000000280)=[{r2}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 20:16:33 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x180) [ 718.140210][T21933] input: syz1 as /devices/virtual/input/input88 20:16:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x1, @vbi={0x300, 0x0, 0x42474752}}) 20:16:33 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000380)=0x43324fffc858b73f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x61, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d4a0a13fc833fbb724b6778d0006450eeab88c525717638193a6eade1404dea09ec1c12f0c2a7fb38bdac25bd65ae2d"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 718.249988][T21944] input: syz1 as /devices/virtual/input/input89 [ 718.504514][T21953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 718.750514][T21962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:16:43 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "e5"}, 0x2) 20:16:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 20:16:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0xe}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 20:16:43 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x180) 20:16:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000380)=0x43324fffc858b73f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x61, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d4a0a13fc833fbb724b6778d0006450eeab88c525717638193a6eade1404dea09ec1c12f0c2a7fb38bdac25bd65ae2d"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 728.183861][T21976] input: syz1 as /devices/virtual/input/input90 [ 728.295621][T21972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:16:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000380)=0x43324fffc858b73f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x61, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d4a0a13fc833fbb724b6778d0006450eeab88c525717638193a6eade1404dea09ec1c12f0c2a7fb38bdac25bd65ae2d"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:16:43 executing program 1: sigaltstack(&(0x7f0000ff9000/0x3000)=nil, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) 20:16:43 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "e5"}, 0x2) 20:16:43 executing program 3: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7}, 0x7) 20:16:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x142, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000080)={0x0, 0xffff, 0x2021, 0x3}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80, 0x1c0800) r3 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f0000000000)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 20:16:43 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x180) 20:16:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}, @global=@item_012={0x2, 0x1, 0x6, "08c9"}]}}, 0x0}, 0x0) 20:16:44 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000000000000001804000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800"/2376]}, 0x9c0) 20:16:44 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000380)=0x43324fffc858b73f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x61, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d4a0a13fc833fbb724b6778d0006450eeab88c525717638193a6eade1404dea09ec1c12f0c2a7fb38bdac25bd65ae2d"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:16:44 executing program 1: ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000000)={0xffffff00}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) [ 729.342104][T22016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:16:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) close(r2) 20:16:44 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x9c) 20:16:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x301080, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000019000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 729.529660][ T3382] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 729.588388][T22022] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 20:16:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) [ 729.658388][T22028] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 729.903773][ T3382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.915392][ T3382] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 729.928469][ T3382] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 729.938208][ T3382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.949266][ T3382] usb 4-1: config 0 descriptor?? [ 730.446502][ T3382] uclogic 0003:2179:0053.0030: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0 [ 730.636728][T12078] usb 4-1: USB disconnect, device number 20 [ 731.413349][T12078] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 731.773674][T12078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.785130][T12078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 731.798381][T12078] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 731.807563][T12078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.817267][T12078] usb 4-1: config 0 descriptor?? [ 732.111284][T12078] uclogic 0003:2179:0053.0031: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0 [ 732.169226][ T3382] usb 4-1: USB disconnect, device number 21 20:16:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xec, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 20:16:54 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x180) 20:16:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000340)=""/41, 0x29) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x2000000000000200, 0x0) 20:16:54 executing program 2: unshare(0x20400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 20:16:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 20:16:54 executing program 5: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2717, 0x0, &(0x7f0000000000)) [ 739.183983][T22051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:16:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 20:16:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xec, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 20:16:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xec, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 20:16:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffb6}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 20:16:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000540)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xc, 0x218, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ' \x00\x00I'}, 0x0, 0x0, @userptr, 0x4}) 20:16:54 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080), 0xc) 20:16:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 20:16:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 20:16:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xec, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 20:16:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xfffffffc}, 0x45c) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 20:16:55 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 20:16:55 executing program 2: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0) 20:16:55 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010101000000000000000000020000000c00020008000100df21f402"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 20:16:55 executing program 2: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0) 20:16:55 executing program 4: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x10) 20:16:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:16:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 20:16:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0c7ddb", "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"}}, 0x110) [ 740.274487][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 740.284478][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:16:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'team0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 20:16:55 executing program 2: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0) 20:16:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$cgroup_int(r2, &(0x7f0000001040), 0x12) 20:16:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:16:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="da511d82144faaca584231354bdd0d748f0a1dd081d4afa96bef1ba72590cc145c9166d4c3b5b0f279326c35bd7360ef55979ce1b2c8452733f0486f754dce3c9f4707c5b355217669bcace6f1c873563042a66ddd98ba4c01591d8125de1d1c7e60b66d4f72d9c976ea84ccadf13f7bbf3ebb17c77f1a84a2bd1ddf2cf228f8c4d04b21bd1adcdd5d603ed620281953a5dabdc60b80dbed5eb2f5f6b6f544daf855173a31443e16efa417e70fafa91796e1f93cfd94d40bc671192611e29831e0bc5d9dd0024810"}) 20:16:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x18f}], 0x1, 0x0, 0x0, 0x1a8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x4db]}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x80, 0x2, 0xf7a5, 0x9b3, 0x8}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\b\xc0\xbf4\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) [ 740.939597][T22154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 740.949206][T22154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:16:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) dup2(r0, r1) 20:16:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:16:56 executing program 2: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0) 20:16:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:56 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) write$sndseq(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f0000000500)=[{r1}], 0x1, &(0x7f0000000540), 0x0, 0x0) 20:16:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, &(0x7f0000000180)) 20:16:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, 0x0, &(0x7f0000000200), 0x8) 20:16:56 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40505330, &(0x7f0000000000)={0x0, 0xc7}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 20:16:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{}, 0x0, 0xfffa, 0x0, 0x0, 0x0}) 20:16:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x0, 0x0, 0x3631564e}}) 20:16:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000a40)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 20:16:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:56 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, 0x0, &(0x7f0000000200), 0x8) 20:16:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="b9", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() setresgid(0x0, r3, 0x0) fchown(r0, r2, r3) syz_open_dev$vcsn(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000019c0)=[0x0]) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) utimes(0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x8000000000000004, &(0x7f0000000140)=0x3, 0x4) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r5, r6, 0x0, 0x8040fffffffd) 20:16:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 'syz1\x00', &(0x7f0000000040)=['/dev/kvm\x00', '-\x00', '/dev/kvm\x00', 'nodev,@userposix_acl_access\x00', '/dev/kvm\x00', 'em0:\x00'], 0x3e}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000840)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:16:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, 0x0, &(0x7f0000000200), 0x8) 20:16:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:57 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 20:16:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, 0x0, &(0x7f0000000200), 0x8) 20:16:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fchown(r5, 0x0, 0xffffffffffffffff) 20:16:57 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:57 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:16:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x633ad856938caf6e, 0x0, 0x0) 20:16:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x88, 0x0, &(0x7f0000000180)=[@decrefs, @free_buffer, @clear_death, @clear_death, @increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 742.551858][T22261] mmap: syz-executor.0 (22261) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:16:57 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2", 0x19}], 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 20:16:57 executing program 4: r0 = fsopen(&(0x7f0000000180)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x2, 0x0, 0x0) 20:16:57 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="cd390b081bf2", @random="d2289d0fd7d4", [], {@ipv6={0x86dd, {0x0, 0x6, "020810", 0x50, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "7605a2", 0x0, 0x33, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [@hopopts={0x2f, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}}}}}}}, 0x0) 20:16:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="2e00000036000502d25a02008c7b94fb0324fc0004000b400c000200053582c137153e37090001802f081700d1bd", 0x2e}], 0x1}, 0x0) 20:16:57 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="cd390b081bf2", @random="d2289d0fd7d4", [], {@ipv6={0x86dd, {0x0, 0x6, "020810", 0x50, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "7605a2", 0x0, 0x33, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [@hopopts={0x2f, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}}}}}}}, 0x0) [ 742.908553][T22280] net_ratelimit: 14 callbacks suppressed [ 742.908572][T22280] netlink: get zone limit has 8 unknown bytes [ 743.001195][T22288] netlink: get zone limit has 8 unknown bytes 20:16:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0xfffffffb}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:16:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="24000000110007041dfffd946f6105000a00000407000000000002000800a3a20400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 20:16:58 executing program 4: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000bcf000), 0x4) setsockopt$inet_int(r0, 0x0, 0xcc, 0x0, 0x0) 20:16:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="5d7e062405", 0x5) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x60, &(0x7f00000000c0)={0x0, @rand_addr, 0x0, 0x0, 'none\x00', 0x4}, 0x2c) 20:16:58 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="cd390b081bf2", @random="d2289d0fd7d4", [], {@ipv6={0x86dd, {0x0, 0x6, "020810", 0x50, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "7605a2", 0x0, 0x33, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [@hopopts={0x2f, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}}}}}}}, 0x0) [ 743.150434][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:16:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=@ethernet={0x6, @link_local}, 0x80) 20:16:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2626c071950fd2a53b030000e6d13509bb602e484707a00f8d3e00d600"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "fca51d8cfe08ed73916d4644a5a8096c037ca8a206da8b57b46d48eb6b590edc38a369fb637639af3067a35f91ca3c44d4413c130d2bade542b27d79a4bd6ea06536f138e4f41d0973145a86dfec749b"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:16:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000019c0)={0x2c, &(0x7f00000005c0)={0x0, 0x0, 0x29, {0x29, 0x0, "4682d0dee33fb5800b10397ccfff15c546833f568de67b3782ee3c2c8bb00e46830de7841025a8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:16:58 executing program 5: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) 20:16:58 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="cd390b081bf2", @random="d2289d0fd7d4", [], {@ipv6={0x86dd, {0x0, 0x6, "020810", 0x50, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "7605a2", 0x0, 0x33, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [@hopopts={0x2f, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}}}}}}}, 0x0) 20:16:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) 20:16:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0xfffffffb}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:16:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) 20:16:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 743.683390][ T4123] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 743.775151][T22334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:16:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000006c02000000000000040000000022"]) [ 743.984061][ T4123] usb 5-1: Using ep0 maxpacket: 8 20:16:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x1e000000}) 20:16:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0xfffffffb}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 744.126006][T22343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 744.156247][ T4123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.167540][ T4123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.181072][ T4123] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 744.190312][ T4123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:16:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdd) [ 744.281363][ T4123] usb 5-1: config 0 descriptor?? 20:16:59 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x4612}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="1ff8ffff", 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 744.796183][ T4123] belkin 0003:050D:3201.0032: global environment stack underflow [ 744.804331][ T4123] belkin 0003:050D:3201.0032: item 0 1 1 11 parsing failed [ 744.812267][ T4123] belkin 0003:050D:3201.0032: parse failed [ 744.818445][ T4123] belkin: probe of 0003:050D:3201.0032 failed with error -22 [ 744.996868][ T4123] usb 5-1: USB disconnect, device number 33 [ 745.773289][ T4123] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 746.013385][ T4123] usb 5-1: Using ep0 maxpacket: 8 [ 746.133361][ T4123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.144572][ T4123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.157702][ T4123] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 746.166965][ T4123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.176707][ T4123] usb 5-1: config 0 descriptor?? [ 746.476580][ T4123] belkin 0003:050D:3201.0033: global environment stack underflow [ 746.484720][ T4123] belkin 0003:050D:3201.0033: item 0 1 1 11 parsing failed [ 746.492531][ T4123] belkin 0003:050D:3201.0033: parse failed [ 746.498764][ T4123] belkin: probe of 0003:050D:3201.0033 failed with error -22 20:17:01 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x73, 0x0, @local={0xfe, 0x80, [0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:17:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505330, &(0x7f0000006fa8)={{0x50f}}) 20:17:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000140)="0fbd040f09f30f1ef80f20e06635100000000f22e0f30fc7fb663e660fe1bfb5cade8c00000f356766c7442400fbffffff6766c7449a02006000006766c744240600000000670f011c24", 0x4e}], 0x1, 0x0, 0x0, 0xfffffffffffffcc9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:17:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0xfffffffb}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:17:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdd) 20:17:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000040)={@remote}, 0x20) [ 746.531743][ T4123] usb 5-1: USB disconnect, device number 34 20:17:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @rand_addr="2bed84e15f64a0c8113a748fae123d6b"}]}, 0x40}}, 0x0) 20:17:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000040)={@remote}, 0x20) 20:17:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdd) 20:17:01 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0x71) 20:17:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) write$tun(r1, &(0x7f0000000400)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x1}, @ipv6={0x0, 0x6, "8e8958", 0x2c, 0x0, 0x0, @mcast2, @local, {[], @tipc=@payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}, 0x5e) 20:17:02 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, [], {@ipv4={0x800, {{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0xb, 0x0, [@remote, @empty]}, @ra={0x94, 0x6}, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x6, "1c8e2618"}, {0x0, 0xf, "0b0d94f48043741d6881d97955"}, {0x0, 0x11, "30f5be6e0f11f6f4725b9b7f9c2bb1"}]}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 20:17:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003600)={0x8, 0x0, [{0x0, 0x1000, &(0x7f0000000500)=""/4096}, {0x0, 0x7e, &(0x7f0000000000)=""/126}, {0x0, 0xdb, &(0x7f0000000240)=""/219}, {0x0, 0x76, &(0x7f0000000440)=""/118}, {0x0, 0xfffffffffffffcb7, &(0x7f0000000340)=""/252}, {0x0, 0x1000, &(0x7f0000001500)=""/4096}, {0x0, 0x1000, &(0x7f0000002500)=""/4096}, {0x0, 0xfc, &(0x7f0000003500)=""/252}]}) 20:17:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000040)={@remote}, 0x20) [ 747.115712][T22412] input: syz1 as /devices/virtual/input/input93 20:17:02 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000140)="9d9cb7d20317fd62b08a9a63774df7170bc04d3406506776e79e1632a6ae4f4e235a249034d1e8c225fbbe08174820af95bcaa3d02000000624e16b9a5d67a50705a46a82252a1439f552436b111bc0978da6a4cc4650039c9fc4ef6ae87dc46b4514996044dae885b3a01908d85", 0x0}, 0x61) 20:17:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdd) 20:17:02 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd5}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 20:17:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000040)={@remote}, 0x20) 20:17:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x800000}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0214f9f407000904008100000000000000000000000800040005000000", 0xfc9b) 20:17:02 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x3d}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 20:17:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003600)={0x8, 0x0, [{0x0, 0x1000, &(0x7f0000000500)=""/4096}, {0x0, 0x7e, &(0x7f0000000000)=""/126}, {0x0, 0xdb, &(0x7f0000000240)=""/219}, {0x0, 0x76, &(0x7f0000000440)=""/118}, {0x0, 0xfffffffffffffcb7, &(0x7f0000000340)=""/252}, {0x0, 0x1000, &(0x7f0000001500)=""/4096}, {0x0, 0x1000, &(0x7f0000002500)=""/4096}, {0x0, 0xfc, &(0x7f0000003500)=""/252}]}) 20:17:02 executing program 1: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) munmap(&(0x7f000090d000/0x1000)=nil, 0x1000) madvise(&(0x7f000090c000/0x4000)=nil, 0x4000, 0xf) dup3(r0, r1, 0x0) 20:17:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) dup2(r3, r0) io_submit(r1, 0xf6ab2a9, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 20:17:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") mmap(&(0x7f0000ee2000/0x4000)=nil, 0x4000, 0x0, 0x2aeb4800bb29e172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ee5000/0x2000)=nil, 0x2000, 0x2) 20:17:02 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x105400, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r2 = shmget$private(0x0, 0x4000, 0x1c40, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xfdfffffffffffffe) 20:17:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fcntl$notify(r0, 0x402, 0xfffffffffffffffd) exit(0x0) fcntl$setstatus(r0, 0x4, 0x40000) getdents(r0, &(0x7f0000000080)=""/92, 0x5c) 20:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xd162, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045540, &(0x7f00000001c0)) 20:17:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003600)={0x8, 0x0, [{0x0, 0x1000, &(0x7f0000000500)=""/4096}, {0x0, 0x7e, &(0x7f0000000000)=""/126}, {0x0, 0xdb, &(0x7f0000000240)=""/219}, {0x0, 0x76, &(0x7f0000000440)=""/118}, {0x0, 0xfffffffffffffcb7, &(0x7f0000000340)=""/252}, {0x0, 0x1000, &(0x7f0000001500)=""/4096}, {0x0, 0x1000, &(0x7f0000002500)=""/4096}, {0x0, 0xfc, &(0x7f0000003500)=""/252}]}) 20:17:03 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000000c0)='rose0\x00', 0x4, 0x1800, 0x6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) read$FUSE(r3, &(0x7f0000000a00), 0x1000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697a3e8bcafb8bd8}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x0, 0x7, 0xfb3, 0xfff, 0x3, 0x6, 0x2, 0x2}}) 20:17:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) 20:17:03 executing program 1: r0 = socket(0x400040000000015, 0x805, 0x0) recvfrom$rxrpc(r0, 0x0, 0x13, 0x0, 0x0, 0x1fb) [ 748.097112][ T31] audit: type=1800 audit(1571084223.144:45): pid=22476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 20:17:03 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003600)={0x8, 0x0, [{0x0, 0x1000, &(0x7f0000000500)=""/4096}, {0x0, 0x7e, &(0x7f0000000000)=""/126}, {0x0, 0xdb, &(0x7f0000000240)=""/219}, {0x0, 0x76, &(0x7f0000000440)=""/118}, {0x0, 0xfffffffffffffcb7, &(0x7f0000000340)=""/252}, {0x0, 0x1000, &(0x7f0000001500)=""/4096}, {0x0, 0x1000, &(0x7f0000002500)=""/4096}, {0x0, 0xfc, &(0x7f0000003500)=""/252}]}) 20:17:03 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000000c0)='rose0\x00', 0x4, 0x1800, 0x6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) read$FUSE(r3, &(0x7f0000000a00), 0x1000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697a3e8bcafb8bd8}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x0, 0x7, 0xfb3, 0xfff, 0x3, 0x6, 0x2, 0x2}}) [ 748.230563][T22482] dlm: non-version read from control device 4096 20:17:03 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035d", 0x2}], 0x1}, 0x0) 20:17:03 executing program 1: syz_usb_connect(0x1, 0x365, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c, 0x3, 0xfffe}}]}}]}}]}}, 0x0) 20:17:03 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000000c0)='rose0\x00', 0x4, 0x1800, 0x6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) read$FUSE(r3, &(0x7f0000000a00), 0x1000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697a3e8bcafb8bd8}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x0, 0x7, 0xfb3, 0xfff, 0x3, 0x6, 0x2, 0x2}}) [ 748.456293][T22499] dlm: non-version read from control device 4096 [ 748.650269][T22507] dlm: non-version read from control device 4096 [ 748.745388][ T4123] usb 2-1: new low-speed USB device number 61 using dummy_hcd 20:17:04 executing program 2: unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 20:17:04 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035d", 0x2}], 0x1}, 0x0) 20:17:04 executing program 5: socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5f4507c4065b0500731112005fbbaa1d1b87ba37ad5864a93616bb6cec0e935000e0854dac2d8ccc65bf9a0000000000000000000000000070767c6fbe8970dc249e67c0a8c1c36997c1356e26e38360a2b5be771056e6a68324a5321f0ae16d8ce7e3b0d9ebff9eedba630de7728654ff2f0ba0182e1bf9556a91a9c1f26a1ccf72c38b6a9977fe0905e371113904109fa697445ba12ce165b5673110dc7dad19c5891dc4f3cc1ea47806b72b5ac1ec26cb20799e4a8d8e31cc323de6fe333e72335a3b26c221"], 0xa) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000000)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x2) 20:17:04 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000000c0)='rose0\x00', 0x4, 0x1800, 0x6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) read$FUSE(r3, &(0x7f0000000a00), 0x1000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697a3e8bcafb8bd8}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x0, 0x7, 0xfb3, 0xfff, 0x3, 0x6, 0x2, 0x2}}) 20:17:04 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x74, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) [ 749.028911][T22521] dlm: non-version read from control device 4096 20:17:04 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035d", 0x2}], 0x1}, 0x0) [ 749.113690][ T4123] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 749.121989][ T4123] usb 2-1: config 0 has no interface number 0 [ 749.128442][ T4123] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 749.139907][ T4123] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8 [ 749.151576][ T4123] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e 20:17:04 executing program 0: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00?\x00P\xe0\x00', 0x30, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20000240, 0x20000270], 0x2, 0x0, &(0x7f0000000240)=[{}, {}, {}]}, 0x108) 20:17:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x9d25866b4b8c637d}, {}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 749.160842][ T4123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.185544][ T4123] usb 2-1: config 0 descriptor?? 20:17:04 executing program 2: unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) [ 749.231807][ T4123] Registered IR keymap rc-streamzap [ 749.238429][ T4123] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0 [ 749.252933][ T4123] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0/input95 [ 749.313822][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 749.320394][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 749.327101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 749.333577][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:17:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000070a07031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 749.425639][ T4123] streamzap 2-1:0.146: Registered on usb2:61 [ 749.451722][ T4123] usb 2-1: USB disconnect, device number 61 [ 749.463292][ C1] streamzap 2-1:0.146: urb terminated, status: -108 [ 750.203450][ T3382] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 750.573641][ T3382] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 750.582184][ T3382] usb 2-1: config 0 has no interface number 0 [ 750.588635][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 750.600109][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8 [ 750.611452][ T3382] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 750.620866][ T3382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.630686][ T3382] usb 2-1: config 0 descriptor?? [ 750.678090][ T3382] Registered IR keymap rc-streamzap [ 750.685604][ T3382] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0 [ 750.699987][ T3382] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0/input96 [ 750.733967][ T3382] streamzap 2-1:0.146: Registered on usb2:62 [ 750.876470][ T3382] usb 2-1: USB disconnect, device number 62 [ 750.893315][ C0] streamzap 2-1:0.146: urb terminated, status: -108 20:17:06 executing program 1: syz_usb_connect(0x1, 0x365, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c, 0x3, 0xfffe}}]}}]}}]}}, 0x0) 20:17:06 executing program 5: socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5f4507c4065b0500731112005fbbaa1d1b87ba37ad5864a93616bb6cec0e935000e0854dac2d8ccc65bf9a0000000000000000000000000070767c6fbe8970dc249e67c0a8c1c36997c1356e26e38360a2b5be771056e6a68324a5321f0ae16d8ce7e3b0d9ebff9eedba630de7728654ff2f0ba0182e1bf9556a91a9c1f26a1ccf72c38b6a9977fe0905e371113904109fa697445ba12ce165b5673110dc7dad19c5891dc4f3cc1ea47806b72b5ac1ec26cb20799e4a8d8e31cc323de6fe333e72335a3b26c221"], 0xa) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000000)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x2) 20:17:06 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035d", 0x2}], 0x1}, 0x0) 20:17:06 executing program 2: unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 20:17:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x4], 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:17:06 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000bb19ca170c95000000000000000000000000000000007f0000feff00001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000014ecc8dfb74aa5f79fcf6200"/199]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r1 = socket(0x10, 0x200000000803, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {0x0, @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {0x0, @local}}}}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x44) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x4003, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000002c0)={0x1, 0x7}) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, &(0x7f00000002c0)) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000300)={'\xf0\x1frY0\xee\xff>\x15\x00', @ifru_map={0x7, 0x806, 0x8, 0x6, 0x4, 0x4}}) r6 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000240)={'batadv0\x00', 0xb5}) 20:17:06 executing program 2: unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 20:17:06 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x21c, 0x0) [ 751.756034][ T3382] usb 2-1: new low-speed USB device number 63 using dummy_hcd 20:17:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0010000, 0x0, 0xc0010140], [0xc1]}) 20:17:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = inotify_init1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x2a4) splice(r3, 0x0, r2, 0x0, 0x39, 0x0) dup3(r1, r3, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) 20:17:06 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000bb19ca170c95000000000000000000000000000000007f0000feff00001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000014ecc8dfb74aa5f79fcf6200"/199]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r1 = socket(0x10, 0x200000000803, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {0x0, @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {0x0, @local}}}}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x44) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x4003, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000002c0)={0x1, 0x7}) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, &(0x7f00000002c0)) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000300)={'\xf0\x1frY0\xee\xff>\x15\x00', @ifru_map={0x7, 0x806, 0x8, 0x6, 0x4, 0x4}}) r6 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000240)={'batadv0\x00', 0xb5}) 20:17:07 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x27, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000000b93b3f43acae2889d2f4e32b1b1ef248000a"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 752.135872][ T3382] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 752.144446][ T3382] usb 2-1: config 0 has no interface number 0 [ 752.150875][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 752.164089][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8 [ 752.175519][ T3382] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 752.184823][ T3382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.203451][T22598] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.235997][T22600] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.247787][ T3382] usb 2-1: config 0 descriptor?? [ 752.298051][ T3382] Registered IR keymap rc-streamzap [ 752.305409][ T3382] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0 [ 752.320692][ T3382] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0/input97 [ 752.353041][ T3382] streamzap 2-1:0.146: Registered on usb2:63 [ 752.502643][ T3382] usb 2-1: USB disconnect, device number 63 20:17:08 executing program 1: syz_usb_connect(0x1, 0x365, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c, 0x3, 0xfffe}}]}}]}}]}}, 0x0) 20:17:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 20:17:08 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x12, 0x0, 0x0, [], [{0xffffffffffffffff}]}) 20:17:08 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000bb19ca170c95000000000000000000000000000000007f0000feff00001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000014ecc8dfb74aa5f79fcf6200"/199]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r1 = socket(0x10, 0x200000000803, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {0x0, @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {0x0, @local}}}}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x44) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x4003, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000002c0)={0x1, 0x7}) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, &(0x7f00000002c0)) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000300)={'\xf0\x1frY0\xee\xff>\x15\x00', @ifru_map={0x7, 0x806, 0x8, 0x6, 0x4, 0x4}}) r6 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000240)={'batadv0\x00', 0xb5}) 20:17:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) splice(r2, 0x0, r4, 0x0, 0x80000000000ec6, 0x4) 20:17:08 executing program 5: socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5f4507c4065b0500731112005fbbaa1d1b87ba37ad5864a93616bb6cec0e935000e0854dac2d8ccc65bf9a0000000000000000000000000070767c6fbe8970dc249e67c0a8c1c36997c1356e26e38360a2b5be771056e6a68324a5321f0ae16d8ce7e3b0d9ebff9eedba630de7728654ff2f0ba0182e1bf9556a91a9c1f26a1ccf72c38b6a9977fe0905e371113904109fa697445ba12ce165b5673110dc7dad19c5891dc4f3cc1ea47806b72b5ac1ec26cb20799e4a8d8e31cc323de6fe333e72335a3b26c221"], 0xa) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000000)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x2) 20:17:08 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x12, 0x0, 0x0, [], [{0xffffffffffffffff}]}) 20:17:08 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0xe52}) 20:17:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 20:17:08 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x12, 0x0, 0x0, [], [{0xffffffffffffffff}]}) 20:17:08 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000bb19ca170c95000000000000000000000000000000007f0000feff00001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000014ecc8dfb74aa5f79fcf6200"/199]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r1 = socket(0x10, 0x200000000803, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {0x0, @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {0x0, @local}}}}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x44) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x4003, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000002c0)={0x1, 0x7}) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, &(0x7f00000002c0)) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000300)={'\xf0\x1frY0\xee\xff>\x15\x00', @ifru_map={0x7, 0x806, 0x8, 0x6, 0x4, 0x4}}) r6 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000240)={'batadv0\x00', 0xb5}) [ 753.363358][ T3382] usb 2-1: new low-speed USB device number 64 using dummy_hcd 20:17:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='logon\x00', &(0x7f0000001ffb)={'@ \x02', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0xfffffffffffffffd) write$P9_RGETATTR(r1, 0x0, 0x0) [ 753.463843][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.470254][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 753.477038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.483433][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 753.763609][ T3382] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 753.772011][ T3382] usb 2-1: config 0 has no interface number 0 [ 753.778470][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 753.789878][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8 [ 753.801293][ T3382] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 753.811051][ T3382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.821104][ T3382] usb 2-1: config 0 descriptor?? [ 753.868472][ T3382] Registered IR keymap rc-streamzap [ 753.875848][ T3382] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0 [ 753.896516][ T3382] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0/input98 [ 753.914307][ T3382] streamzap 2-1:0.146: Registered on usb2:64 [ 754.072479][ T3382] usb 2-1: USB disconnect, device number 64 [ 754.083333][ C0] streamzap 2-1:0.146: urb terminated, status: -108 20:17:09 executing program 1: syz_usb_connect(0x1, 0x365, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c, 0x3, 0xfffe}}]}}]}}]}}, 0x0) 20:17:09 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 20:17:09 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x12, 0x0, 0x0, [], [{0xffffffffffffffff}]}) 20:17:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000640)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 20:17:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0xa, 0x0, [], 0x0}) 20:17:09 executing program 5: socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5f4507c4065b0500731112005fbbaa1d1b87ba37ad5864a93616bb6cec0e935000e0854dac2d8ccc65bf9a0000000000000000000000000070767c6fbe8970dc249e67c0a8c1c36997c1356e26e38360a2b5be771056e6a68324a5321f0ae16d8ce7e3b0d9ebff9eedba630de7728654ff2f0ba0182e1bf9556a91a9c1f26a1ccf72c38b6a9977fe0905e371113904109fa697445ba12ce165b5673110dc7dad19c5891dc4f3cc1ea47806b72b5ac1ec26cb20799e4a8d8e31cc323de6fe333e72335a3b26c221"], 0xa) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000000)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x2) [ 754.655683][T22656] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 20:17:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 20:17:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) 20:17:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) dup2(r0, r1) [ 754.903578][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 754.910611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 754.944124][ T3382] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 754.983863][ C1] protocol 88fb is buggy, dev hsr_slave_0 20:17:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 20:17:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000b0f00000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c0002000800140000000000"], 0x38}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 754.991177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 754.999012][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 755.005749][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:17:10 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='1'], 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYBLOB="06fc1bd59793e449951f94a3a1e37d24c4bf3fc44964d10317931dff9500b54def197e037b15ea045d6ec7eaf6ad9633a6d3d4cdff87b9f162629422d96ab05e", @ANYRESOCT, @ANYBLOB="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"], 0xfffffc3f) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 755.143754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.150286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 755.334208][ T3382] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 755.342615][ T3382] usb 2-1: config 0 has no interface number 0 [ 755.349149][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 755.360581][ T3382] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8 [ 755.371917][ T3382] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 755.381274][ T3382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.408406][ T3382] usb 2-1: config 0 descriptor?? [ 755.468463][ T3382] Registered IR keymap rc-streamzap [ 755.475298][ T3382] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0 [ 755.490005][ T3382] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.146/rc/rc0/input99 [ 755.545808][ T3382] streamzap 2-1:0.146: Registered on usb2:65 [ 755.671678][ T4123] usb 2-1: USB disconnect, device number 65 [ 755.683273][ C0] streamzap 2-1:0.146: urb terminated, status: -108 20:17:11 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 20:17:11 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="240000005e0007041dfffd946f610500070000001d00000002000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 20:17:11 executing program 0: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 20:17:11 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000001d00)={{0x12, 0x1, 0x0, 0x96, 0x20, 0xd, 0x20, 0x1f71, 0x3301, 0x6246, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x0, 0x40, 0x36, 0x22}}]}}]}}, 0x0) 20:17:11 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000800), 0x4) 20:17:11 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 20:17:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) 20:17:11 executing program 3: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)) getdents(r1, &(0x7f0000000000)=""/126, 0x3f) getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) [ 756.493353][ T3382] usb 6-1: new high-speed USB device number 24 using dummy_hcd 20:17:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) ioctl$KDGKBLED(r2, 0x4004510d, &(0x7f0000000040)) 20:17:11 executing program 0: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) [ 756.733477][ T3382] usb 6-1: Using ep0 maxpacket: 32 [ 756.853769][ T3382] usb 6-1: config 0 has an invalid interface number: 208 but max is 0 [ 756.862226][ T3382] usb 6-1: config 0 has no interface number 0 [ 756.868663][ T3382] usb 6-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=62.46 [ 756.877981][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:17:11 executing program 2: io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x4}) [ 756.929375][ T3382] usb 6-1: config 0 descriptor?? 20:17:12 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 20:17:12 executing program 1: unshare(0x600) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) 20:17:12 executing program 3: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) [ 757.180339][ T3382] usb 6-1: USB disconnect, device number 24 20:17:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040)=0x68, 0x1) [ 757.963679][ T4123] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 758.203482][ T4123] usb 6-1: Using ep0 maxpacket: 32 [ 758.323694][ T4123] usb 6-1: config 0 has an invalid interface number: 208 but max is 0 [ 758.332266][ T4123] usb 6-1: config 0 has no interface number 0 [ 758.338877][ T4123] usb 6-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=62.46 [ 758.348396][ T4123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.358798][ T4123] usb 6-1: config 0 descriptor?? [ 758.605576][ T4123] usb 6-1: USB disconnect, device number 25 20:17:14 executing program 5: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) 20:17:14 executing program 0: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 20:17:14 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xe538, 0x4, {0x1, @raw_data="91c317e532ed8aae710af5141194a4f3c1c9dd7320301f4bbb68bb38cf4c0f7aabf90ec73338c4fbb209f2ada49252832a0f9f18764d92557b9ed6f9fbb91062e34a85f56a3625e27986be7298c838d4a88f9a98579cd767708a0902e15f31084d3d871c65e6295fb09a06231b4115303464d474efe7851aef656513a79ead86615a5dd817f7ad7871ff492da2d1a7765a717bd6fb7b764a9c6dd057250afa21935ec894b1001f7525d97b962b4397ade47b8ea3ab470c2678f2c866e649585c7eb5de1b83fda8ab"}}) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x40045612, &(0x7f0000000240)={0x1, @sdr}) dup3(r1, r0, 0x0) 20:17:14 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 20:17:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4b, 0x16}}) 20:17:14 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 20:17:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/162, 0xa2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000c40), 0x4000000000002fb, 0x2404c856) 20:17:14 executing program 2: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb9040a1d656f0b007c05e87c55a1bc000500b800069903000000050015000600812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb80002043cc07a290457f0187b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a468214f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b0900e0b42a9e4000000000000000e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 20:17:14 executing program 1: mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = geteuid() r4 = creat(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57c87, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0xdf87, 0x3f}, 0xb0a, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, r3, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, r5, r6, 0x200}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) 20:17:14 executing program 5: openat$hwrng(0xffffffffffffff9c, 0x0, 0x109000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f0000000040)) [ 759.393855][T22788] IPv6: NLM_F_CREATE should be specified when creating new route 20:17:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") fgetxattr(r0, &(0x7f00000000c0)=@random={'user.', '!*::\x00'}, &(0x7f0000000100)=""/241, 0xf1) 20:17:14 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xd}) 20:17:14 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)='h', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa5776b) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:17:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/70, 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000068c0)=""/4096, 0x3600}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004d00)=""/83, 0x53}], 0x1}}], 0x3, 0x0, 0x0) 20:17:14 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) 20:17:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x5d, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400}) shutdown(r0, 0x0) 20:17:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000f4, 0x2f) [ 759.886184][T22815] IPVS: dh: UDP 224.0.0.1:0 - no destination available 20:17:15 executing program 4: pselect6(0x2, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 20:17:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@rand_addr="02e573ac500ec333e0672465b60ecf1f"}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 20:17:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 20:17:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000300)=""/228, 0xffffffffffffff4f, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000159000)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) close(r0) 20:17:15 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="3bd0f5278c41", [], {@ipv6={0x86dd, {0x0, 0x6, "dd19c6", 0x8, 0x73, 0x0, @local, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 20:17:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000300)=""/228, 0xffffffffffffff4f, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000159000)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) close(r0) 20:17:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)='h', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa5776b) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:17:15 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 20:17:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="2e676626dd7800660f38818b0500000066b831018ed065650f01caf30f23cb29a17ad676c7660f1426c4c1d5f93cfab9800000c00f3235010000000f30c4e1f1dd9595b50000", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:17:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xfff}) getxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2020200}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[]}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 760.864142][T22868] IPVS: dh: UDP 224.0.0.1:0 - no destination available 20:17:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0020200a1009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 20:17:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000300)=""/228, 0xffffffffffffff4f, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000159000)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) close(r0) 20:17:16 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) [ 761.082308][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 20:17:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:16 executing program 5: unshare(0x2a000400) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0f85403, 0x0) 20:17:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000300)=""/228, 0xffffffffffffff4f, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000159000)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) close(r0) 20:17:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x3011, r0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000fc0)={'security\x00'}, &(0x7f0000000040)=0x54) 20:17:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 761.546883][T22898] loop_set_block_size: loop0 () has still dirty pages (nrpages=6) 20:17:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)='h', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa5776b) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:17:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x4000000000fff, &(0x7f0000000280)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f00000002c0)="c8", 0x1}]) 20:17:16 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1) read(r0, 0x0, 0xfffffd74) 20:17:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x46, "26c141e7554fb8273e566fd8b353940963941aef778ea525bd033c5d877c5757c45a925c44460ef54b12ddbd2aeb3c162cfe26531727772ae178c0d6494586e2f0e2ebd82323"}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 761.848459][T22916] Invalid option length (0) for dns_resolver key 20:17:16 executing program 5: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37e49e05671e9c09, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x10024}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 761.910368][T22923] IPVS: dh: UDP 224.0.0.1:0 - no destination available 20:17:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f00009c4ff0)) 20:17:17 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1) read(r0, 0x0, 0xfffffd74) [ 762.153387][T22929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:17:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close(r0) 20:17:17 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1) read(r0, 0x0, 0xfffffd74) 20:17:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f00009c4ff0)) 20:17:17 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1) read(r0, 0x0, 0xfffffd74) [ 762.701642][T22938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:17:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)='h', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa5776b) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:17:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f00009c4ff0)) 20:17:17 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @local}, 0xc) [ 762.919097][T22968] IPVS: dh: UDP 224.0.0.1:0 - no destination available 20:17:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 20:17:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f00009c4ff0)) 20:17:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:18 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="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", 0xfb0}, {0x0}], 0x3}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@iv={0x18}, @iv={0x18}, @iv={0x18}], 0x48}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:17:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7c, 0x0, [0xc001001f]}) 20:17:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000600)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x2200000}, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r3 = creat(&(0x7f0000000640)='./file0\x00', 0xc0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0xfffffdc9}, 0x1bb49bd1) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff, 0x0, 0x0, "6bf5483c92674eef7c491587e096db18401e46"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x3140, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x33, 0x2e, 0x14, 0xfff, 0x2, 0x9, 0x1, 0xb8}) gettid() ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0x9, 0x4, 0xffffffff, 0x2}) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) [ 763.525637][T22996] loop_set_block_size: loop0 () has still dirty pages (nrpages=16) 20:17:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x105400, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 20:17:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="200000001a00012f0d000000000000081c140000a0cf80000f00000000800000", 0x20) 20:17:18 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0) [ 763.858830][T23007] IPVS: ftp: loaded support on port[0] = 21 20:17:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc51}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 20:17:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$FS_IOC_GETFLAGS(r1, 0xb701, 0x0) [ 764.143670][T23023] loop_set_block_size: loop0 () has still dirty pages (nrpages=32) 20:17:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) 20:17:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000300)=0x385) 20:17:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x54, 0x6c000000}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x438, &(0x7f0000000180)=""/153}, 0x23e) 20:17:19 executing program 2: madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x1}) 20:17:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000001c0)="9d0291f575431631354e9ffd17e14fa8f76252c5fa4976b7e21d3d687057a7cddc"}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 764.754460][T23051] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 20:17:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000600)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x2200000}, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r3 = creat(&(0x7f0000000640)='./file0\x00', 0xc0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0xfffffdc9}, 0x1bb49bd1) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff, 0x0, 0x0, "6bf5483c92674eef7c491587e096db18401e46"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x3140, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x33, 0x2e, 0x14, 0xfff, 0x2, 0x9, 0x1, 0xb8}) gettid() ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0x9, 0x4, 0xffffffff, 0x2}) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) 20:17:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="ffaf858b77283ab61a09f3b109838e271de58d17b8004c1f"], 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:17:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = getpid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000015) shutdown(r2, 0x2) 20:17:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0xb0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0xb0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/175, 0xaf}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:17:20 executing program 0: unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='\x00\x00\x00\x00\x00:=\x973\x13A\x9a]\x89]\x06mwO\xe9]\x87\xfd\xa2\xd2\xa3k\xe5Jc1\x8f=\xf9\xeaB\x96\x9c\x06\x92og9\xf7\x0f\x04%\n\x7f\no\x03\xe3\xbe\xadnp\a\xdc\xd7\xfe\xf9O\xa9\x99\xea\x93\x92\xa2\xe8/&{6\x8a\xc25\xfd\xa2\xfaP\x17\a}\x98\xd2c,\xf4\x0f\xa8%\xa5\xfe\xa8\xbcpO#$\x1by\r\xb8\xfc\x93') fstat(r0, &(0x7f0000000100)) [ 765.101478][T23062] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 20:17:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000540)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000600)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "18010004"}, 0x0, 0x0, @userptr, 0x4, 0x0, 0x9}) [ 765.281950][T23074] IPVS: ftp: loaded support on port[0] = 21 20:17:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000900)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:17:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0xb0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0xb0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/175, 0xaf}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:17:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x7, 0x0, 0x0, 0x0) 20:17:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc90}}, 0x23) 20:17:20 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000080), 0x10) 20:17:20 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60002000}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0) 20:17:20 executing program 4: socket(0x200040000000015, 0x805, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271e, 0x0, &(0x7f000033bffc)) 20:17:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000600)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x2200000}, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r3 = creat(&(0x7f0000000640)='./file0\x00', 0xc0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0xfffffdc9}, 0x1bb49bd1) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff, 0x0, 0x0, "6bf5483c92674eef7c491587e096db18401e46"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x3140, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x33, 0x2e, 0x14, 0xfff, 0x2, 0x9, 0x1, 0xb8}) gettid() ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0x9, 0x4, 0xffffffff, 0x2}) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) 20:17:20 executing program 1: unshare(0x40600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x9, 0x0}, 0x10) 20:17:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) read(r2, 0x0, 0x82) tkill(r0, 0x1004000000016) 20:17:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0xb0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0xb0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/175, 0xaf}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:17:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0xc0010058], [0x3a]}) 20:17:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002f8fc8)={0x0, 0x0, 0x0}, 0x8001) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000308000)=""/1, 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f00002ac000)={0x0, 0x0, 0x0}, 0x0) 20:17:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400060005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 20:17:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440), 0x8) 20:17:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) 20:17:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0xb0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0xb0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/175, 0xaf}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 766.248050][T23138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:17:21 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r3 = creat(&(0x7f0000000640)='./file0\x00', 0xc0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0xfffffdc9}, 0x1bb49bd1) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff, 0x0, 0x0, "6bf5483c92674eef7c491587e096db18401e46"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x3140, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x33, 0x2e, 0x14, 0xfff, 0x2, 0x9, 0x1, 0xb8}) gettid() ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0x9, 0x4, 0xffffffff, 0x2}) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) 20:17:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000800000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000100000008060300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000e0000001000000007f00000100000000000000000000000000000000aaaaaaaaaa00000000000000000000000000000072656469726563740000000000000000000000000000000000000800"/400]}, 0x208) [ 766.982201][T23169] input: syz1 as /devices/virtual/input/input101 20:17:22 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 20:17:22 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb, 0x0, 0x0, {0x20000000000017}}, 0x14}, 0x1, 0x68}, 0x0) r0 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0x44, 0x1, 0x0, [0x0, 0x0, 0x20000080], 0x0, 0x0, 0x0}, 0x108) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 20:17:22 executing program 3: ustat(0x9, &(0x7f0000000000)) 20:17:22 executing program 1: r0 = open(&(0x7f0000000440)='./bus\x00', 0x4c080, 0x40) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) write$tun(r0, 0x0, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(0x0, r1, 0x4, r0, 0xf) mlockall(0x11) mount(0x0, 0x0, 0x0, 0x1100, 0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) fcntl$lock(r2, 0x26, &(0x7f0000000040)) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) fcntl$lock(r3, 0x0, 0x0) epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) open(0x0, 0x0, 0x0) r5 = dup(r4) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x9, @loopback}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4) r6 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r4, r6, 0x0, 0x8000fffffffe) [ 767.187503][T23169] input: syz1 as /devices/virtual/input/input102 20:17:22 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0x69, 0x21, 0x8, 0x6a3, 0xff04, 0xaa66, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x2, 0x8d, 0x6a, 0x92, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) [ 767.416513][T23184] IPVS: ftp: loaded support on port[0] = 21 20:17:22 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 20:17:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000002c0)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r1, r0, 0x0) tkill(r2, 0x15) [ 767.710075][T23210] input: syz1 as /devices/virtual/input/input103 20:17:22 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 20:17:22 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb, 0x0, 0x0, {0x20000000000017}}, 0x14}, 0x1, 0x68}, 0x0) r0 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0x44, 0x1, 0x0, [0x0, 0x0, 0x20000080], 0x0, 0x0, 0x0}, 0x108) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") [ 767.893813][ T3382] usb 4-1: new high-speed USB device number 22 using dummy_hcd 20:17:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000002c0)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r1, r0, 0x0) tkill(r2, 0x15) 20:17:23 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 768.133776][ T3382] usb 4-1: Using ep0 maxpacket: 8 [ 768.146123][T23224] input: syz1 as /devices/virtual/input/input104 20:17:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) [ 768.263828][ T3382] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 768.274719][ T3382] usb 4-1: config 0 has no interface number 0 [ 768.281184][ T3382] usb 4-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice=aa.66 [ 768.290424][ T3382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:17:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r2, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 768.434998][ T3382] usb 4-1: config 0 descriptor?? 20:17:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000002c0)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r1, r0, 0x0) tkill(r2, 0x15) 20:17:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) openat$cgroup_ro(r1, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) readv(r2, &(0x7f00000002c0), 0x17c) 20:17:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1fd2, 0x6007, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "0a78b5b2"}, @main=@item_4={0x3, 0x0, 0x8, "5b96c24c"}]}}, 0x0}, 0x0) [ 768.672837][T23245] input: syz1 as /devices/virtual/input/input105 [ 768.705434][T12078] usb 4-1: USB disconnect, device number 22 [ 769.053581][ T3382] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 769.293350][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 769.413662][ T3382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.424943][ T3382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 769.438531][ T3382] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.40 [ 769.448216][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.458155][ T3382] usb 6-1: config 0 descriptor?? [ 769.513669][T12078] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 769.763412][T12078] usb 4-1: Using ep0 maxpacket: 8 [ 769.903862][T12078] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 769.912276][T12078] usb 4-1: config 0 has no interface number 0 [ 769.918725][T12078] usb 4-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice=aa.66 [ 769.928133][T12078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.938316][T12078] usb 4-1: config 0 descriptor?? [ 769.949476][ T3382] hid-multitouch 0003:1FD2:6007.0034: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 770.168883][ T3382] usb 6-1: USB disconnect, device number 26 [ 770.205475][T12078] usb 4-1: USB disconnect, device number 23 20:17:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r2, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:17:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x84) 20:17:25 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb, 0x0, 0x0, {0x20000000000017}}, 0x14}, 0x1, 0x68}, 0x0) r0 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0x44, 0x1, 0x0, [0x0, 0x0, 0x20000080], 0x0, 0x0, 0x0}, 0x108) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 20:17:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$isdn(0x22, 0x2, 0x10) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:17:25 executing program 2: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000001380)="ff", 0x1, 0x0, &(0x7f0000001280)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) 20:17:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r2, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 771.016780][ T3382] usb 6-1: new high-speed USB device number 27 using dummy_hcd 20:17:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r2, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:17:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x14, 0x4, 0x0, @local, @local, {[], @udp={0x0, 0x0, 0x14, 0x0, [@guehdr={0x1}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) [ 771.087710][T23264] syz-executor.2 (23264) used greatest stack depth: 52920 bytes left 20:17:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x84) 20:17:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x356, 0x0, 0x0, 0x0) [ 771.263373][ T3382] usb 6-1: Using ep0 maxpacket: 8 20:17:26 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb, 0x0, 0x0, {0x20000000000017}}, 0x14}, 0x1, 0x68}, 0x0) r0 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0x44, 0x1, 0x0, [0x0, 0x0, 0x20000080], 0x0, 0x0, 0x0}, 0x108) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") [ 771.383812][ T3382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.395749][ T3382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 771.408899][ T3382] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.40 [ 771.418223][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.535725][ T3382] usb 6-1: config 0 descriptor?? 20:17:26 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x24020400) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 20:17:26 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) ppoll(&(0x7f0000000500)=[{r1}], 0x1, &(0x7f0000000540), 0x0, 0x0) 20:17:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4030ae7b, &(0x7f0000000080)) 20:17:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x84) [ 771.914908][ T3382] usbhid 6-1:0.0: can't add hid device: -71 [ 771.921333][ T3382] usbhid: probe of 6-1:0.0 failed with error -71 [ 771.987593][ T3382] usb 6-1: USB disconnect, device number 27 20:17:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000c00000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 20:17:28 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$isdn(0x22, 0x2, 0x10) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:17:28 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000001c0)={0x1, 0x6}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080), 0x2) 20:17:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x4e, 0x0, 0x0) dup2(r1, r3) dup3(r1, r2, 0x0) 20:17:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x84) 20:17:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x176}]}) [ 773.710018][T23271] delete_channel: no stack [ 773.782341][T23327] misc userio: Can't change port type on an already running userio instance 20:17:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000c00000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 20:17:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="83369bc4a0d053bf404f3a3ce10e9682df60b38f43b5089bcfe0cb54", 0x1c}], 0x1) 20:17:29 executing program 5: syz_usb_connect(0x0, 0x387, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1235808fd0b110081a7000000010902240001000000000904d300026296bd0009050702000000000009050c020000000000c64378b2af008ed381b269059d96fc3a380b4708b56b068400113f812860c886a2cc7c112c980392528bb57e00006d7b"], 0x0) 20:17:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000c00000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 20:17:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="83369bc4a0d053bf404f3a3ce10e9682df60b38f43b5089bcfe0cb54", 0x1c}], 0x1) 20:17:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000c00000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) [ 774.405309][ T3382] usb 6-1: new high-speed USB device number 28 using dummy_hcd 20:17:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="83369bc4a0d053bf404f3a3ce10e9682df60b38f43b5089bcfe0cb54", 0x1c}], 0x1) [ 774.673458][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 774.813620][ T3382] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 774.822284][ T3382] usb 6-1: config 0 has no interface number 0 [ 774.830602][ T3382] usb 6-1: config 0 interface 211 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 774.842119][ T3382] usb 6-1: config 0 interface 211 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 774.852191][ T3382] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.81 [ 774.861525][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.872411][ T3382] usb 6-1: config 0 descriptor?? [ 774.915093][ T3382] kvaser_usb 6-1:0.211: Cannot get usb endpoint(s) [ 775.116871][ T3382] usb 6-1: USB disconnect, device number 28 [ 775.893376][ T3382] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 776.133763][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 776.253574][ T3382] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 776.262060][ T3382] usb 6-1: config 0 has no interface number 0 [ 776.268768][ T3382] usb 6-1: config 0 interface 211 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 776.279749][ T3382] usb 6-1: config 0 interface 211 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 776.289968][ T3382] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.81 [ 776.299494][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.309713][ T3382] usb 6-1: config 0 descriptor?? [ 776.354869][ T3382] kvaser_usb 6-1:0.211: Cannot get usb endpoint(s) [ 776.555583][ T4123] usb 6-1: USB disconnect, device number 29 20:17:31 executing program 1: getgroups(0x4bb, 0x0) 20:17:31 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$isdn(0x22, 0x2, 0x10) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:17:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="83369bc4a0d053bf404f3a3ce10e9682df60b38f43b5089bcfe0cb54", 0x1c}], 0x1) 20:17:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {0x0, r3, 0x2}}, 0x18) 20:17:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3ed) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="36a2", 0x2}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 776.896382][T23334] delete_channel: no stack 20:17:32 executing program 1: unshare(0x20400) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x50) 20:17:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x13, 0x0, 0xbc) 20:17:32 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x78, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 20:17:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0}, 0x18) 20:17:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7c, &(0x7f0000000280), &(0x7f0000000280)=0x319) 20:17:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xc2604111, &(0x7f0000000180)="9444942fdedbc92768c74a4a5b927840a1c43ece6ce1063c7d8b36dfa999a401c0cab00063") 20:17:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x13, 0x0, 0xbc) 20:17:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc7747cf"}, 0x0, 0x0, @planes=0x0, 0x4}) 20:17:35 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$isdn(0x22, 0x2, 0x10) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:17:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 20:17:35 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)) 20:17:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7c, 0x0, [0x4b564d00, 0xfff]}) 20:17:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x13, 0x0, 0xbc) 20:17:35 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xf48, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2042, 0x0) [ 779.991366][T23377] delete_channel: no stack 20:17:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x40000096]}) 20:17:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, &(0x7f0000000080)=0xf0, 0x100001) 20:17:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x13, 0x0, 0xbc) 20:17:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000eb8de108697a010036190000000109021200010000008009040000009be13600"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 20:17:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x100) write$cgroup_int(r0, &(0x7f0000000080), 0x12) close(r0) 20:17:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x50, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, @m_bpf={0x18, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}}}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x7}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) [ 780.717438][ T4123] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 780.973848][ T4123] usb 2-1: Using ep0 maxpacket: 8 [ 781.105899][ T4123] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 781.115711][ T4123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.141212][ T4123] usb 2-1: config 0 descriptor?? [ 781.201213][ T4123] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 782.057981][ T4123] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 782.068674][ T4123] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 782.077214][ T4123] usb 2-1: media controller created [ 782.107920][ T4123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 782.159614][ T4123] tc90522 0-0018: Toshiba TC90522 attached. [ 782.171115][ T4123] usb 2-1: DVB: registering adapter 0 frontend 0 (Toshiba TC90522 ISDB-T module)... [ 782.181423][ T4123] dvbdev: dvb_create_media_entity: media entity 'Toshiba TC90522 ISDB-T module' registered. [ 782.235797][ T4123] dvb_pll: probe of 2-0060 failed with error -12 [ 782.299134][ T4123] usb 2-1: USB disconnect, device number 66 [ 782.813535][ T4123] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 783.053371][ T4123] usb 2-1: Using ep0 maxpacket: 8 20:17:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x50, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, @m_bpf={0x18, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}}}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x7}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) 20:17:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000007}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:17:38 executing program 4: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20:17:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 20:17:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x245, &(0x7f0000000300)={&(0x7f00000009c0)={0x14, 0x30, 0x30d, 0x0, 0x0, {0x1801}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) [ 783.095247][T23429] delete_channel: no stack [ 783.183778][ T4123] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 783.192938][ T4123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:17:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xb48, 0x20000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x4, 0x40}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x70, 0x0, &(0x7f00000000c0)) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 783.240914][ T4123] usb 2-1: config 0 descriptor?? 20:17:38 executing program 4: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20:17:38 executing program 0: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00\x00\x00\b\x00'}) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 20:17:38 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) sendto(r0, &(0x7f0000000080)="f5", 0x1, 0x0, &(0x7f0000000100)=@generic={0xa, "6a64c974246412fdb7e4937f9442856bb59c929ee4a4d8ed023d4fb8c157aefef87528417a5dbb266c1215687e3a3e7cac9293f2c6dffd1fb0bc81692c0a16348217ea1350bab263aea5aec5295a7daf06e02021d0ce17fa039ec38c86840a6dabc8024e80511492c3c476ff0173c6ec799414bcb3331ed847386283e44a"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0xfc0004) accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0xfffffffffffffe6c, 0x0) [ 783.288317][ T4123] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state 20:17:38 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 20:17:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x50, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, @m_bpf={0x18, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}}}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x7}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) 20:17:38 executing program 0: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00\x00\x00\b\x00'}) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 20:17:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6\x8b\x84\xd6\xb5`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a\xd3\xd2\r\x1c[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x00\x00\x00\x00\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9B\xddPT\x8d,\xc8:\xee\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\x00'/414) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) 20:17:38 executing program 4: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 783.664817][ T4123] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 783.676019][ T4123] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 783.684701][ T4123] usb 2-1: media controller created [ 783.846638][T23508] device nr0 entered promiscuous mode 20:17:39 executing program 4: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000004000000000404e9ff0000c0073510fbff0000b4086a192559fca4d62bd2be4a2f1775000017587d26099700"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 783.922696][ T4123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 20:17:39 executing program 0: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00\x00\x00\b\x00'}) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 20:17:39 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 784.210336][ T4123] tc90522 0-0018: Toshiba TC90522 attached. [ 784.260505][ T4123] usb 2-1: DVB: registering adapter 0 frontend 0 (Toshiba TC90522 ISDB-T module)... [ 784.270628][ T4123] dvbdev: dvb_create_media_entity: media entity 'Toshiba TC90522 ISDB-T module' registered. 20:17:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xb48, 0x20000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x4, 0x40}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x70, 0x0, &(0x7f00000000c0)) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:17:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x50, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, @m_bpf={0x18, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}}}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x7}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) 20:17:39 executing program 0: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00\x00\x00\b\x00'}) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 20:17:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x43, &(0x7f0000000040)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) [ 784.424003][ T4123] dvb_pll: probe of 2-0060 failed with error -12 [ 784.649006][ T4123] usb 2-1: USB disconnect, device number 67 20:17:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc008240a, &(0x7f0000000000)=0x1) 20:17:39 executing program 4: unshare(0x24020400) r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) close(r1) pipe(&(0x7f00000000c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r3) close(r4) pipe(&(0x7f0000000100)) close(r2) tee(r0, r4, 0x5, 0x0) 20:17:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/140) 20:17:39 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4000000}, 0x0, 0x0, 0xfffffffffffffffe) 20:17:40 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x9, 0x7, 0x0) [ 784.972386][T23563] encrypted_key: keyword 'new' not allowed when called from .update method 20:17:40 executing program 4: r0 = socket(0x40000000000001e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/59, 0x3b}}], 0x1, 0x0, 0x0) 20:17:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 785.063558][ T4123] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 785.423627][ T4123] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 785.432931][ T4123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.448707][ T4123] usb 2-1: config 0 descriptor?? [ 785.499094][ T4123] pwc: Samsung MPC-C10 USB webcam detected. [ 785.923448][ T4123] pwc: recv_control_msg error -71 req 02 val 2b00 [ 785.943838][ T4123] pwc: recv_control_msg error -71 req 02 val 2700 [ 785.963522][ T4123] pwc: recv_control_msg error -71 req 04 val 1700 [ 785.983650][ T4123] pwc: recv_control_msg error -71 req 02 val 2c00 [ 786.003637][ T4123] pwc: recv_control_msg error -71 req 04 val 1000 [ 786.023810][ T4123] pwc: recv_control_msg error -71 req 04 val 1300 [ 786.043519][ T4123] pwc: recv_control_msg error -71 req 04 val 1400 [ 786.063621][ T4123] pwc: recv_control_msg error -71 req 02 val 2000 [ 786.083646][ T4123] pwc: recv_control_msg error -71 req 02 val 2100 [ 786.103966][ T4123] pwc: recv_control_msg error -71 req 02 val 2200 [ 786.123354][ T4123] pwc: recv_control_msg error -71 req 06 val 0600 [ 786.143544][ T4123] pwc: recv_control_msg error -71 req 04 val 1500 [ 786.163378][ T4123] pwc: recv_control_msg error -71 req 02 val 2500 [ 786.184157][ T4123] pwc: recv_control_msg error -71 req 02 val 2400 [ 786.203394][ T4123] pwc: recv_control_msg error -71 req 02 val 2600 [ 786.223392][ T4123] pwc: recv_control_msg error -71 req 02 val 2900 [ 786.243334][ T4123] pwc: recv_control_msg error -71 req 02 val 2800 [ 786.263643][ T4123] pwc: recv_control_msg error -71 req 04 val 1100 [ 786.283399][ T4123] pwc: recv_control_msg error -71 req 04 val 1200 [ 786.290972][ T4123] pwc: Registered as video39. [ 786.297804][ T4123] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input108 [ 786.314583][ T4123] usb 2-1: USB disconnect, device number 68 20:17:41 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x9, @sdr}) 20:17:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c3", 0x35}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 20:17:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001020101000000003f2c11b91e6143481000010004000100080002000000e100"], 0x24}}, 0x0) 20:17:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000003560b700eff003010003ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x390}]}) 20:17:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2fb) 20:17:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xb48, 0x20000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x4, 0x40}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x70, 0x0, &(0x7f00000000c0)) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 786.946382][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:17:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001020101000000003f2c11b91e6143481000010004000100080002000000e100"], 0x24}}, 0x0) 20:17:42 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe00b1a83c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r1) [ 787.054712][T23601] ptrace attach of "/root/syz-executor.3"[23597] was attempted by "/root/syz-executor.3"[23601] 20:17:42 executing program 1: unshare(0x20000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getown(r0, 0x9) 20:17:42 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c3", 0x35}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 20:17:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\x00'}, 0x3, 0x80, 0x5, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f00000000c0)=['Le\x8bh1\x81=)\x00^\x00kv\x81'], 0xe}) [ 787.248201][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:17:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4008ae90, 0x0) dup2(r6, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4008ae90, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001020101000000003f2c11b91e6143481000010004000100080002000000e100"], 0x24}}, 0x0) 20:17:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) [ 787.582601][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.623977][ T4123] usb 5-1: new high-speed USB device number 35 using dummy_hcd 20:17:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001020101000000003f2c11b91e6143481000010004000100080002000000e100"], 0x24}}, 0x0) 20:17:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002800dfffffffffffffff000000000000", @ANYRES32=r6, @ANYBLOB="1f00000000000000000000007e78c62b066492285bd45adb55ddf68c0ab21d9a4ae220debeb1677feab251a0c2ef92ee3352c7c40ab05cc82da2c3cc0d955fcaa7bf209c21435fe1f9e9801701cbdb81625ac6dcd234b235497568e5c9865fa954373d4752a74221f77edbade32f330ca6217f89eb69731dfdcd5497d17ceb87ce6c1b77ef3e2a5e930d3a33ea29a112fca6"], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 787.821575][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.863612][ T4123] usb 5-1: Using ep0 maxpacket: 8 20:17:43 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1202"], 0x2) setrlimit(0x400000000000007, &(0x7f0000000000)) close(r0) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 20:17:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xb48, 0x20000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x4, 0x40}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x70, 0x0, &(0x7f00000000c0)) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:17:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "fbf84ce9dbecf3d5851ae060c0ec8d55c9c65cb98d69f6f43f1d64d475f279dd204e54f6719de408d640f2dcd4c0c8c615650de0531b139380f912f808e5d3e1118f76144d1568be425bddb29fa4cb1251d5cc8b78fb742bd61674f4cd92a93f8dafea3bc823ccd7591d59d252a275012101f39ab9478cc5dc4a8a2e71f186ce688ae8699051ea701624ac60f1dc926fd97b40b62231d243db1eca472440f1203b691b7b85864a73f1a3a9664d075ac973158948f7c44b4f8e2348e8046b08dcb423647eff2539993b8985028d7f0a50e94ee6b2fdacff6aee496b13807eb8d406a8440af14e339713f93a2bd76d46d34452c9bf604ac61d66e9ff34503a7ff4"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002800dfffffffffffffff000000000000", @ANYRES32=r6, @ANYBLOB="1f00000000000000000000007e78c62b066492285bd45adb55ddf68c0ab21d9a4ae220debeb1677feab251a0c2ef92ee3352c7c40ab05cc82da2c3cc0d955fcaa7bf209c21435fe1f9e9801701cbdb81625ac6dcd234b235497568e5c9865fa954373d4752a74221f77edbade32f330ca6217f89eb69731dfdcd5497d17ceb87ce6c1b77ef3e2a5e930d3a33ea29a112fca6"], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 787.994310][ T4123] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 788.005762][ T4123] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.017209][ T4123] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 788.026759][ T4123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.185219][ T4123] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 788.339499][T23625] debugfs: Directory '23625-4' with parent 'kvm' already present! [ 788.795593][ T4123] usb 5-1: USB disconnect, device number 35 [ 789.563470][ T4123] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 789.803475][ T4123] usb 5-1: Using ep0 maxpacket: 8 [ 789.923696][ T4123] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 789.934816][ T4123] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.947036][ T4123] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 789.957915][ T4123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.013715][ T4123] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 790.206155][ T4123] usb 5-1: USB disconnect, device number 36 20:17:45 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000200)={{0x2000ffffff93}, {0x0, 0x81}}) 20:17:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002800dfffffffffffffff000000000000", @ANYRES32=r6, @ANYBLOB="1f00000000000000000000007e78c62b066492285bd45adb55ddf68c0ab21d9a4ae220debeb1677feab251a0c2ef92ee3352c7c40ab05cc82da2c3cc0d955fcaa7bf209c21435fe1f9e9801701cbdb81625ac6dcd234b235497568e5c9865fa954373d4752a74221f77edbade32f330ca6217f89eb69731dfdcd5497d17ceb87ce6c1b77ef3e2a5e930d3a33ea29a112fca6"], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 20:17:45 executing program 0: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001a00)=ANY=[]}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xc8) 20:17:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4008ae90, 0x0) dup2(r6, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4008ae90, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xfffffffc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4008ae6a, &(0x7f0000000080)) 20:17:45 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c3", 0x35}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 20:17:45 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000100)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x9, 0x0, [], "ba"}}}}}, 0x0) 20:17:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 20:17:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "fbf84ce9dbecf3d5851ae060c0ec8d55c9c65cb98d69f6f43f1d64d475f279dd204e54f6719de408d640f2dcd4c0c8c615650de0531b139380f912f808e5d3e1118f76144d1568be425bddb29fa4cb1251d5cc8b78fb742bd61674f4cd92a93f8dafea3bc823ccd7591d59d252a275012101f39ab9478cc5dc4a8a2e71f186ce688ae8699051ea701624ac60f1dc926fd97b40b62231d243db1eca472440f1203b691b7b85864a73f1a3a9664d075ac973158948f7c44b4f8e2348e8046b08dcb423647eff2539993b8985028d7f0a50e94ee6b2fdacff6aee496b13807eb8d406a8440af14e339713f93a2bd76d46d34452c9bf604ac61d66e9ff34503a7ff4"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002800dfffffffffffffff000000000000", @ANYRES32=r6, @ANYBLOB="1f00000000000000000000007e78c62b066492285bd45adb55ddf68c0ab21d9a4ae220debeb1677feab251a0c2ef92ee3352c7c40ab05cc82da2c3cc0d955fcaa7bf209c21435fe1f9e9801701cbdb81625ac6dcd234b235497568e5c9865fa954373d4752a74221f77edbade32f330ca6217f89eb69731dfdcd5497d17ceb87ce6c1b77ef3e2a5e930d3a33ea29a112fca6"], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 20:17:45 executing program 5: r0 = socket$inet(0x10, 0x3, 0x10000000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000c061f001cfffd946fa2830020200a000500010005e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 20:17:45 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140)="6812334f6743a747f8bf094356", 0xffb0, 0x8800, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x38, 0x4088, 0x0, 0x0) 20:17:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000000000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 790.915936][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:17:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000000000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 20:17:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xff0f, 0x72, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x80045432, &(0x7f0000000080)) 20:17:46 executing program 5: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x25, &(0x7f0000000000), 0x20a1562f) 20:17:46 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read$FUSE(r1, &(0x7f0000000240), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 20:17:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4008ae90, 0x0) dup2(r6, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4008ae90, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:48 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c3", 0x35}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 20:17:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000016003f0400000000000000000a00000021fe000014000100fe8000000000000000000000000000aa"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket(0x10, 0x80002, 0x0) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 20:17:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000000000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 20:17:48 executing program 5: unshare(0x2000400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000000380), 0x6) 20:17:48 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read$FUSE(r1, &(0x7f0000000240), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 20:17:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4008ae90, 0x0) dup2(r6, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4008ae90, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:48 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read$FUSE(r1, &(0x7f0000000240), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 20:17:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000000000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 20:17:48 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) 20:17:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) 20:17:48 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read$FUSE(r1, &(0x7f0000000240), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 20:17:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x2000000010a, 0x0) semop(r2, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r2, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) 20:17:51 executing program 2: socket(0x10, 0x2, 0x0) socket$inet(0x10, 0x4000000000000002, 0x0) syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:17:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x300000b, 0x44031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:51 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unshare(0x8020000) 20:17:51 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02130000020000000000000e000000c5"], 0x10}}, 0x0) 20:17:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 20:17:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}) [ 796.644382][T23795] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 796.660870][T23795] CPU: 0 PID: 23795 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 796.669183][T23795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.670580][T23795] Call Trace: [ 796.670580][T23795] dump_stack+0x191/0x1f0 [ 796.670580][T23795] warn_alloc+0x4e4/0x710 [ 796.670580][T23795] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 796.670580][T23795] __vmalloc_node_range+0xeec/0x1260 [ 796.701370][T23795] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 796.701370][T23795] __vmalloc_node_flags_caller+0x12a/0x140 [ 796.701370][T23795] ? kvm_arch_create_memslot+0x172/0xa40 [ 796.701370][T23795] ? kvm_arch_create_memslot+0x172/0xa40 [ 796.701370][T23795] kvmalloc_node+0x393/0x3d0 [ 796.701370][T23795] kvm_arch_create_memslot+0x172/0xa40 [ 796.701370][T23795] __kvm_set_memory_region+0x128f/0x2db0 [ 796.701370][T23795] kvm_vm_ioctl+0x132b/0x2df0 [ 796.701370][T23795] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 796.701370][T23795] ? vcpu_stat_clear_per_vm+0x2e0/0x2e0 [ 796.701370][T23795] do_vfs_ioctl+0xea8/0x2c50 [ 796.701370][T23795] ? security_file_ioctl+0x1bd/0x200 [ 796.701370][T23795] __se_sys_ioctl+0x1da/0x270 [ 796.701370][T23795] __x64_sys_ioctl+0x4a/0x70 [ 796.701370][T23795] do_syscall_64+0xb6/0x160 [ 796.701370][T23795] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 796.701370][T23795] RIP: 0033:0x459a59 [ 796.701370][T23795] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.701370][T23795] RSP: 002b:00007ff43fe0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.701370][T23795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 796.701370][T23795] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004 [ 796.701370][T23795] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 796.701370][T23795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff43fe0e6d4 [ 796.701370][T23795] R13: 00000000004c29f7 R14: 00000000004d64e0 R15: 00000000ffffffff [ 796.867618][T23795] Mem-Info: [ 796.870897][T23795] active_anon:120418 inactive_anon:283 isolated_anon:0 [ 796.870897][T23795] active_file:7776 inactive_file:7238 isolated_file:0 [ 796.870897][T23795] unevictable:0 dirty:75 writeback:0 unstable:0 [ 796.870897][T23795] slab_reclaimable:5197 slab_unreclaimable:18308 [ 796.870897][T23795] mapped:58842 shmem:288 pagetables:2242 bounce:0 [ 796.870897][T23795] free:664372 free_pcp:1451 free_cma:0 [ 796.909895][T23795] Node 0 active_anon:474804kB inactive_anon:1108kB active_file:30872kB inactive_file:28652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235368kB dirty:276kB writeback:0kB shmem:1128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 397312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 796.939461][T23795] Node 1 active_anon:6868kB inactive_anon:24kB active_file:232kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:24kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 796.968524][T23795] Node 0 DMA free:13980kB min:216kB low:268kB high:320kB active_anon:1908kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 20:17:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000002c000009104"]) 20:17:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 20:17:52 executing program 2: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd000000100001000b0c0900fcff0000040e05a5", 0x58}], 0x1) [ 796.996243][T23795] lowmem_reserve[]: 0 2738 3428 3428 [ 797.001845][T23795] Node 0 DMA32 free:51016kB min:38652kB low:48312kB high:57972kB active_anon:464872kB inactive_anon:344kB active_file:22364kB inactive_file:15332kB unevictable:0kB writepending:252kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:5184kB pagetables:5936kB bounce:0kB free_pcp:1812kB local_pcp:844kB free_cma:0kB [ 797.034237][T23795] lowmem_reserve[]: 0 0 690 690 [ 797.039199][T23795] Node 0 Normal free:12088kB min:9744kB low:12180kB high:14616kB active_anon:8024kB inactive_anon:764kB active_file:8508kB inactive_file:13320kB unevictable:0kB writepending:24kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11328kB pagetables:736kB bounce:0kB free_pcp:2264kB local_pcp:1056kB free_cma:0kB [ 797.069536][T23795] lowmem_reserve[]: 0 0 0 0 [ 797.074244][T23795] Node 1 Normal free:2581292kB min:41492kB low:51864kB high:62236kB active_anon:6868kB inactive_anon:24kB active_file:232kB inactive_file:300kB unevictable:0kB writepending:24kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:1664kB pagetables:2148kB bounce:0kB free_pcp:1968kB local_pcp:544kB free_cma:0kB [ 797.105505][T23795] lowmem_reserve[]: 0 0 0 0 [ 797.110145][T23795] Node 0 DMA: 5*4kB (UM) 5*8kB (UME) 2*16kB (ME) 2*32kB (ME) 4*64kB (UME) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (M) = 13980kB [ 797.126807][T23795] Node 0 DMA32: 2*4kB (UM) 22*8kB (UME) 27*16kB (ME) 109*32kB (UME) 29*64kB (UME) 156*128kB (UME) 42*256kB (U) 16*512kB (UME) 6*1024kB (UE) 0*2048kB 0*4096kB = 51016kB [ 797.145522][T23795] Node 0 Normal: 846*4kB (UM) 394*8kB (UME) 113*16kB (UME) 69*32kB (UM) 16*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12088kB [ 797.161439][T23795] Node 1 Normal: 77*4kB (UM) 37*8kB (UME) 27*16kB (UME) 21*32kB (ME) 46*64kB (UME) 28*128kB (UME) 13*256kB (UME) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 626*4096kB (UM) = 2581292kB [ 797.180963][T23795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.190824][T23795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.200318][T23795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.210045][T23795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.219481][T23795] 15301 total pagecache pages [ 797.224356][T23795] 0 pages in swap cache [ 797.228619][T23795] Swap cache stats: add 0, delete 0, find 0/0 [ 797.234983][T23795] Free swap = 0kB [ 797.238740][T23795] Total swap = 0kB [ 797.242554][T23795] 1965979 pages RAM [ 797.246520][T23795] 0 pages HighMem/MovableOnly [ 797.251273][T23795] 330599 pages reserved [ 797.255567][T23795] 0 pages cma reserved 20:17:52 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcb, 0xcf, 0x3d, 0x8, 0x6cd, 0x135, 0x9105, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x0, 0x0, 0xd9, 0xbb, 0xa3}}]}}]}}, 0x0) 20:17:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x40f02) ioctl$int_in(r0, 0x80006040045010, &(0x7f0000000000)=0x1) ioctl$int_in(r0, 0x80006040045010, &(0x7f0000000000)=0x5c9) [ 797.426722][T23805] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 797.443394][T23805] CPU: 0 PID: 23805 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 797.451349][T23805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.453103][T23805] Call Trace: [ 797.453103][T23805] dump_stack+0x191/0x1f0 [ 797.453103][T23805] warn_alloc+0x4e4/0x710 [ 797.473253][T23805] ? kmsan_get_metadata+0x39/0x350 [ 797.473253][T23805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 797.473253][T23805] __vmalloc_node_range+0xeec/0x1260 [ 797.473253][T23805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 797.473253][T23805] __vmalloc_node_flags_caller+0x12a/0x140 [ 797.473253][T23805] ? kvm_arch_create_memslot+0x172/0xa40 [ 797.473253][T23805] ? kvm_arch_create_memslot+0x172/0xa40 [ 797.473253][T23805] kvmalloc_node+0x393/0x3d0 [ 797.473253][T23805] kvm_arch_create_memslot+0x172/0xa40 [ 797.473253][T23805] __kvm_set_memory_region+0x128f/0x2db0 [ 797.473253][T23805] kvm_vm_ioctl+0x132b/0x2df0 [ 797.473253][T23805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 797.473253][T23805] ? vcpu_stat_clear_per_vm+0x2e0/0x2e0 [ 797.473253][T23805] do_vfs_ioctl+0xea8/0x2c50 [ 797.473253][T23805] ? security_file_ioctl+0x1bd/0x200 [ 797.473253][T23805] __se_sys_ioctl+0x1da/0x270 [ 797.473253][T23805] __x64_sys_ioctl+0x4a/0x70 [ 797.473253][T23805] do_syscall_64+0xb6/0x160 [ 797.473253][T23805] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.473253][T23805] RIP: 0033:0x459a59 [ 797.473253][T23805] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.473253][T23805] RSP: 002b:00007ff43fdecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.473253][T23805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 797.473253][T23805] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004 [ 797.473253][T23805] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 797.473253][T23805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff43fded6d4 [ 797.473253][T23805] R13: 00000000004c29f7 R14: 00000000004d64e0 R15: 00000000ffffffff 20:17:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 20:17:52 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{}], 0x20000000000000d5, 0x0) 20:17:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}) 20:17:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000080)=0xa4ffffff) [ 797.813692][ T3382] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 797.935236][T23822] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 797.952869][T23822] CPU: 1 PID: 23822 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 797.961097][T23822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.967803][T23822] Call Trace: [ 797.973410][T23822] dump_stack+0x191/0x1f0 [ 797.973410][T23822] warn_alloc+0x4e4/0x710 [ 797.973410][T23822] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 797.973410][T23822] __vmalloc_node_range+0xeec/0x1260 [ 797.973410][T23822] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 797.973410][T23822] __vmalloc_node_flags_caller+0x12a/0x140 [ 797.973410][T23822] ? kvm_arch_create_memslot+0x172/0xa40 [ 797.973410][T23822] ? kvm_arch_create_memslot+0x172/0xa40 [ 797.973410][T23822] kvmalloc_node+0x393/0x3d0 [ 797.973410][T23822] kvm_arch_create_memslot+0x172/0xa40 [ 797.973410][T23822] __kvm_set_memory_region+0x128f/0x2db0 [ 797.973410][T23822] kvm_vm_ioctl+0x132b/0x2df0 [ 797.973410][T23822] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 797.973410][T23822] ? vcpu_stat_clear_per_vm+0x2e0/0x2e0 [ 797.973410][T23822] do_vfs_ioctl+0xea8/0x2c50 [ 797.973410][T23822] ? security_file_ioctl+0x1bd/0x200 [ 797.973410][T23822] __se_sys_ioctl+0x1da/0x270 [ 797.973410][T23822] __x64_sys_ioctl+0x4a/0x70 [ 797.973410][T23822] do_syscall_64+0xb6/0x160 [ 797.973410][T23822] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 797.973410][T23822] RIP: 0033:0x459a59 [ 797.973410][T23822] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.973410][T23822] RSP: 002b:00007ff43fe0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.973410][T23822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 797.973410][T23822] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004 20:17:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) [ 797.973410][T23822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 797.973410][T23822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff43fe0e6d4 [ 797.973410][T23822] R13: 00000000004c29f7 R14: 00000000004d64e0 R15: 00000000ffffffff [ 798.159388][T23822] warn_alloc_show_mem: 1 callbacks suppressed [ 798.159415][T23822] Mem-Info: [ 798.168869][T23822] active_anon:120417 inactive_anon:281 isolated_anon:0 [ 798.168869][T23822] active_file:7776 inactive_file:7244 isolated_file:0 [ 798.168869][T23822] unevictable:0 dirty:81 writeback:0 unstable:0 [ 798.168869][T23822] slab_reclaimable:5197 slab_unreclaimable:18282 [ 798.168869][T23822] mapped:58867 shmem:288 pagetables:2221 bounce:0 [ 798.168869][T23822] free:664122 free_pcp:1421 free_cma:0 [ 798.207959][T23822] Node 0 active_anon:474844kB inactive_anon:1100kB active_file:30872kB inactive_file:28652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235468kB dirty:276kB writeback:0kB shmem:1120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 397312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 798.238467][T23822] Node 1 active_anon:6824kB inactive_anon:24kB active_file:232kB inactive_file:324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:48kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 798.267455][T23822] Node 0 DMA free:13980kB min:216kB low:268kB high:320kB active_anon:1908kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.276633][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 798.295109][T23822] lowmem_reserve[]: 0 2738 3428 3428 20:17:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0xf, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000280)={0x0, 0x0}, 0x10) [ 798.295166][T23822] Node 0 DMA32 free:50892kB min:38652kB low:48312kB high:57972kB active_anon:464912kB inactive_anon:336kB active_file:22364kB inactive_file:15332kB unevictable:0kB writepending:252kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:5120kB pagetables:5948kB bounce:0kB free_pcp:2244kB local_pcp:1492kB free_cma:0kB [ 798.295282][T23822] lowmem_reserve[]: 0 0 690 690 [ 798.344766][T23822] Node 0 Normal free:12088kB min:9744kB low:12180kB high:14616kB active_anon:8024kB inactive_anon:764kB active_file:8508kB inactive_file:13320kB unevictable:0kB writepending:24kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11328kB pagetables:736kB bounce:0kB free_pcp:2264kB local_pcp:1208kB free_cma:0kB [ 798.375813][T23822] lowmem_reserve[]: 0 0 0 0 [ 798.380433][T23822] Node 1 Normal free:2579716kB min:41492kB low:51864kB high:62236kB active_anon:6824kB inactive_anon:24kB active_file:232kB inactive_file:324kB unevictable:0kB writepending:48kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:1984kB pagetables:2052kB bounce:0kB free_pcp:1428kB local_pcp:132kB free_cma:0kB [ 798.412580][T23822] lowmem_reserve[]: 0 0 0 0 [ 798.417275][T23822] Node 0 DMA: 5*4kB (UM) 5*8kB (UME) 2*16kB (ME) 2*32kB (ME) 4*64kB (UME) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (M) = 13980kB [ 798.433960][T23822] Node 0 DMA32: 1*4kB (M) 7*8kB (UME) 27*16kB (ME) 101*32kB (UME) 33*64kB (UME) 156*128kB (UME) 42*256kB (U) 16*512kB (UME) 6*1024kB (UE) 0*2048kB 0*4096kB = 50892kB [ 798.450810][T23822] Node 0 Normal: 846*4kB (UM) 394*8kB (UME) 113*16kB (UME) 69*32kB (UM) 16*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12088kB [ 798.468133][T23822] Node 1 Normal: 87*4kB (UM) 15*8kB (UME) 19*16kB (ME) 22*32kB (UME) 37*64kB (UME) 22*128kB (UME) 13*256kB (UME) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 626*4096kB (UM) = 2579716kB [ 798.486334][T23822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.496460][T23822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.505952][T23822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.515802][T23822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.527690][T23822] 15307 total pagecache pages [ 798.532462][T23822] 0 pages in swap cache [ 798.534187][ T3382] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 798.536776][T23822] Swap cache stats: add 0, delete 0, find 0/0 [ 798.544984][ T3382] usb 6-1: config 0 has no interface number 0 [ 798.551228][T23822] Free swap = 0kB [ 798.558016][ T3382] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=91.05 [ 798.561753][T23822] Total swap = 0kB [ 798.571069][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.574803][T23822] 1965979 pages RAM 20:17:53 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = memfd_create(&(0x7f00000001c0), 0x0) write(r1, &(0x7f0000000540)='ic', 0x2) write$FUSE_DIRENT(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT], 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffff8d) [ 798.587056][T23822] 0 pages HighMem/MovableOnly [ 798.592667][T23822] 330599 pages reserved [ 798.597021][T23822] 0 pages cma reserved [ 798.721418][ T3382] usb 6-1: config 0 descriptor?? 20:17:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x14, &(0x7f0000000000), 0x8) add_key$user(0x0, &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 798.780127][ T3382] keyspan 6-1:0.48: Keyspan 2 port adapter converter detected [ 798.787957][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 81 [ 798.796021][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 1 [ 798.805372][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 84 [ 798.813698][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 2 20:17:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}) 20:17:53 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = memfd_create(&(0x7f00000001c0), 0x0) write(r1, &(0x7f0000000540)='ic', 0x2) write$FUSE_DIRENT(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT], 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffff8d) [ 799.023672][ T3382] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 799.034109][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 88 [ 799.042101][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 6 [ 799.082605][ T3382] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 799.126987][ T3382] usb 6-1: USB disconnect, device number 30 [ 799.171047][ T3382] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 799.210800][ T3382] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 799.221957][ T3382] keyspan 6-1:0.48: device disconnected [ 799.873412][ T3382] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 800.143396][ T3382] usb 6-1: Using ep0 maxpacket: 8 [ 800.293606][ T3382] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 800.302799][ T3382] usb 6-1: config 0 has no interface number 0 [ 800.309549][ T3382] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=91.05 [ 800.319496][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.329185][ T3382] usb 6-1: config 0 descriptor?? [ 800.376837][ T3382] keyspan 6-1:0.48: Keyspan 2 port adapter converter detected [ 800.384916][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 81 [ 800.392911][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 1 [ 800.402158][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 84 [ 800.410390][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 2 [ 800.419947][ T3382] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 800.430413][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 88 [ 800.438555][ T3382] keyspan 6-1:0.48: found no endpoint descriptor for endpoint 6 [ 800.451384][ T3382] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 20:17:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r1, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x80ffff, 0x2]}, 0x2c) 20:17:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) 20:17:55 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = memfd_create(&(0x7f00000001c0), 0x0) write(r1, &(0x7f0000000540)='ic', 0x2) write$FUSE_DIRENT(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT], 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffff8d) 20:17:55 executing program 1: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000086b000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 20:17:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0) 20:17:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}) [ 800.516666][ T3382] usb 6-1: USB disconnect, device number 31 [ 800.570845][ T3382] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 800.631375][T23876] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 800.648186][T23876] CPU: 1 PID: 23876 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 800.653600][ T3382] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 800.656241][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.667034][ T3382] keyspan 6-1:0.48: device disconnected [ 800.657894][T23876] Call Trace: [ 800.657894][T23876] dump_stack+0x191/0x1f0 [ 800.657894][T23876] warn_alloc+0x4e4/0x710 [ 800.657894][T23876] ? kmsan_get_metadata+0x39/0x350 [ 800.657894][T23876] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.684890][T23876] __vmalloc_node_range+0xeec/0x1260 [ 800.684890][T23876] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.684890][T23876] __vmalloc_node_flags_caller+0x12a/0x140 [ 800.684890][T23876] ? kvm_arch_create_memslot+0x172/0xa40 [ 800.684890][T23876] ? kvm_arch_create_memslot+0x172/0xa40 [ 800.684890][T23876] kvmalloc_node+0x393/0x3d0 [ 800.684890][T23876] kvm_arch_create_memslot+0x172/0xa40 [ 800.684890][T23876] __kvm_set_memory_region+0x128f/0x2db0 [ 800.684890][T23876] kvm_vm_ioctl+0x132b/0x2df0 [ 800.684890][T23876] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.684890][T23876] ? vcpu_stat_clear_per_vm+0x2e0/0x2e0 [ 800.684890][T23876] do_vfs_ioctl+0xea8/0x2c50 [ 800.684890][T23876] ? security_file_ioctl+0x1bd/0x200 20:17:55 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3c1, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r2) [ 800.684890][T23876] __se_sys_ioctl+0x1da/0x270 [ 800.684890][T23876] __x64_sys_ioctl+0x4a/0x70 [ 800.684890][T23876] do_syscall_64+0xb6/0x160 [ 800.684890][T23876] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.684890][T23876] RIP: 0033:0x459a59 [ 800.684890][T23876] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.684890][T23876] RSP: 002b:00007ff43fe0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.684890][T23876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 800.684890][T23876] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004 [ 800.684890][T23876] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 800.684890][T23876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff43fe0e6d4 [ 800.684890][T23876] R13: 00000000004c29f7 R14: 00000000004d64e0 R15: 00000000ffffffff [ 800.874696][T23876] Mem-Info: [ 800.878059][T23876] active_anon:120462 inactive_anon:283 isolated_anon:0 [ 800.878059][T23876] active_file:7776 inactive_file:7256 isolated_file:0 [ 800.878059][T23876] unevictable:0 dirty:93 writeback:0 unstable:0 [ 800.878059][T23876] slab_reclaimable:5197 slab_unreclaimable:18291 [ 800.878059][T23876] mapped:58867 shmem:288 pagetables:2258 bounce:0 [ 800.878059][T23876] free:663066 free_pcp:1511 free_cma:0 [ 800.916943][T23876] Node 0 active_anon:474728kB inactive_anon:1100kB active_file:30872kB inactive_file:28652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235568kB dirty:276kB writeback:0kB shmem:1120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 397312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 800.946890][T23876] Node 1 active_anon:7220kB inactive_anon:32kB active_file:232kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:96kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 20:17:56 executing program 1: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x7ffff000) [ 800.974301][T23876] Node 0 DMA free:13980kB min:216kB low:268kB high:320kB active_anon:1908kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.001811][T23876] lowmem_reserve[]: 0 2738 3428 3428 20:17:56 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = memfd_create(&(0x7f00000001c0), 0x0) write(r1, &(0x7f0000000540)='ic', 0x2) write$FUSE_DIRENT(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT], 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffff8d) [ 801.007369][T23876] Node 0 DMA32 free:51068kB min:38652kB low:48312kB high:57972kB active_anon:464796kB inactive_anon:336kB active_file:22364kB inactive_file:15332kB unevictable:0kB writepending:252kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:5120kB pagetables:5936kB bounce:0kB free_pcp:2316kB local_pcp:1320kB free_cma:0kB [ 801.038058][T23876] lowmem_reserve[]: 0 0 690 690 [ 801.042998][T23876] Node 0 Normal free:12088kB min:9744kB low:12180kB high:14616kB active_anon:8024kB inactive_anon:764kB active_file:8508kB inactive_file:13320kB unevictable:0kB writepending:24kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11328kB pagetables:736kB bounce:0kB free_pcp:2264kB local_pcp:1208kB free_cma:0kB [ 801.074518][T23876] lowmem_reserve[]: 0 0 0 0 [ 801.079155][T23876] Node 1 Normal free:2575700kB min:41492kB low:51864kB high:62236kB active_anon:7220kB inactive_anon:32kB active_file:232kB inactive_file:372kB unevictable:0kB writepending:96kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:1984kB pagetables:2064kB bounce:0kB free_pcp:2168kB local_pcp:972kB free_cma:0kB [ 801.109403][T23876] lowmem_reserve[]: 0 0 0 0 [ 801.114107][T23876] Node 0 DMA: 5*4kB (UM) 5*8kB (UME) 2*16kB (ME) 2*32kB (ME) 4*64kB (UME) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (M) = 13980kB [ 801.131630][T23876] Node 0 DMA32: 1*4kB (U) 5*8kB (E) 33*16kB (ME) 102*32kB (UME) 34*64kB (UME) 156*128kB (UME) 42*256kB (U) 16*512kB (UME) 6*1024kB (UE) 0*2048kB 0*4096kB = 51068kB [ 801.148455][T23876] Node 0 Normal: 846*4kB (UM) 394*8kB (UME) 113*16kB (UME) 69*32kB (UM) 16*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12088kB [ 801.148663][T23876] Node 1 Normal: 43*4kB (U) 1*8kB (M) 14*16kB (UME) 20*32kB (UME) 43*64kB (UME) 33*128kB (UME) 23*256kB (UME) 10*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 623*4096kB (UM) = 2575956kB [ 801.183270][T23876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.192946][T23876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 801.202431][T23876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.212190][T23876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 801.222524][T23876] 15321 total pagecache pages [ 801.227381][T23876] 0 pages in swap cache [ 801.231639][T23876] Swap cache stats: add 0, delete 0, find 0/0 [ 801.237876][T23876] Free swap = 0kB [ 801.241673][T23876] Total swap = 0kB [ 801.245553][T23876] 1965979 pages RAM [ 801.249442][T23876] 0 pages HighMem/MovableOnly [ 801.254289][T23876] 330599 pages reserved [ 801.258531][T23876] 0 pages cma reserved 20:17:56 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000280)) 20:17:56 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f00000003c0)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdd80b40000000140003000029ec2400020cd37e99d69cda45a95eb547af750e4ec70150052fe3455f0d1c", 0x5c}], 0x1}, 0x0) [ 801.513994][T23877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 801.540991][T23877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready 20:17:56 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x143041, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee01}}) [ 801.583588][ T4123] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 801.652991][T23903] fuse: Invalid user_id 20:17:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r1, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x80ffff, 0x2]}, 0x2c) 20:17:56 executing program 0: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000776000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000069f000/0x4000)=nil, 0x4000}}) 20:17:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8, 0x4000000000000800, 0x1}, 0xe) read$usbfs(r0, 0x0, 0x0) 20:17:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002222000000a3cfc1df8e040730f9ef519a"], 0x0}, 0x0) [ 801.823465][ T4123] usb 5-1: Using ep0 maxpacket: 8 [ 801.946466][ T4123] usb 5-1: config index 0 descriptor too short (expected 961, got 36) [ 801.954984][ T4123] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 801.965183][ T4123] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853 [ 801.975355][ T4123] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 20:17:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000001580), 0x4) 20:17:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe1e, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x2}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x14c}}, 0x0) [ 801.988713][ T4123] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 801.998000][ T4123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.059159][T23921] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 802.156237][T12078] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 802.413459][T12078] usb 2-1: Using ep0 maxpacket: 32 [ 802.477995][ T4123] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 802.543602][T12078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.554835][T12078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 802.568752][T12078] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 802.578034][T12078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.589463][T12078] usb 2-1: config 0 descriptor?? [ 802.883878][ T4123] usb 5-1: USB disconnect, device number 37 [ 802.893202][ C1] usblp0: nonzero read bulk status received: -108 [ 803.056435][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.063654][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.070919][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.079508][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.089737][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.098521][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.105718][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.108606][T23891] ===================================================== [ 803.112796][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.113088][T23891] BUG: KMSAN: use-after-free in usb_autopm_put_interface+0xf2/0x120 [ 803.113088][T23891] CPU: 0 PID: 23891 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 803.113088][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.113088][T23891] Call Trace: [ 803.113088][T23891] dump_stack+0x191/0x1f0 [ 803.115452][T23891] kmsan_report+0x14a/0x2f0 [ 803.115452][T23891] __msan_warning+0x73/0xf0 [ 803.115452][T23891] usb_autopm_put_interface+0xf2/0x120 [ 803.115452][T23891] usblp_release+0x182/0x3d0 [ 803.115452][T23891] ? usblp_open+0x610/0x610 [ 803.115452][T23891] __fput+0x4c9/0xba0 [ 803.126997][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] ____fput+0x37/0x40 [ 803.115452][T23891] ? fput_many+0x2a0/0x2a0 [ 803.115452][T23891] task_work_run+0x22e/0x2a0 [ 803.115452][T23891] prepare_exit_to_usermode+0x39d/0x4d0 [ 803.115452][T23891] syscall_return_slowpath+0x90/0x610 [ 803.115452][T23891] do_syscall_64+0xdc/0x160 [ 803.115452][T23891] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.115452][T23891] RIP: 0033:0x413741 [ 803.115452][T23891] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 803.147602][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] RSP: 002b:00007f41a95dec40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 803.115452][T23891] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000413741 [ 803.115452][T23891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 803.115452][T23891] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 803.115452][T23891] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f41a95df6d4 [ 803.115452][T23891] R13: 00000000004bf169 R14: 00000000004e09c8 R15: 00000000ffffffff [ 803.115452][T23891] [ 803.115452][T23891] Uninit was created at: [ 803.115452][T23891] kmsan_internal_poison_shadow+0x60/0x110 [ 803.115452][T23891] kmsan_slab_free+0x8d/0x100 [ 803.115452][T23891] kfree+0x4c1/0x2e70 [ 803.161441][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] usb_release_interface+0x105/0x120 [ 803.115452][T23891] device_release+0xe2/0x380 [ 803.115452][T23891] kobject_put+0x38d/0x480 [ 803.115452][T23891] put_device+0x51/0x70 [ 803.115452][T23891] usb_disable_device+0x69a/0x1150 [ 803.115452][T23891] usb_disconnect+0x51e/0xd60 [ 803.115452][T23891] hub_event+0x3fd0/0x72f0 [ 803.115452][T23891] process_one_work+0x1572/0x1ef0 [ 803.170353][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] worker_thread+0x111b/0x2460 [ 803.115452][T23891] kthread+0x4b5/0x4f0 [ 803.115452][T23891] ret_from_fork+0x35/0x40 [ 803.115452][T23891] ===================================================== [ 803.115452][T23891] Disabling lock debugging due to kernel taint [ 803.115452][T23891] Kernel panic - not syncing: panic_on_warn set ... [ 803.115452][T23891] CPU: 0 PID: 23891 Comm: syz-executor.4 Tainted: G B 5.4.0-rc3+ #0 [ 803.115452][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.115452][T23891] Call Trace: [ 803.115452][T23891] dump_stack+0x191/0x1f0 [ 803.115452][T23891] panic+0x3c9/0xc1e [ 803.180420][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] kmsan_report+0x2e8/0x2f0 [ 803.115452][T23891] __msan_warning+0x73/0xf0 [ 803.115452][T23891] usb_autopm_put_interface+0xf2/0x120 [ 803.115452][T23891] usblp_release+0x182/0x3d0 [ 803.115452][T23891] ? usblp_open+0x610/0x610 [ 803.189606][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] __fput+0x4c9/0xba0 [ 803.115452][T23891] ____fput+0x37/0x40 [ 803.115452][T23891] ? fput_many+0x2a0/0x2a0 [ 803.115452][T23891] task_work_run+0x22e/0x2a0 [ 803.115452][T23891] prepare_exit_to_usermode+0x39d/0x4d0 [ 803.115452][T23891] syscall_return_slowpath+0x90/0x610 [ 803.200530][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] do_syscall_64+0xdc/0x160 [ 803.115452][T23891] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.115452][T23891] RIP: 0033:0x413741 [ 803.115452][T23891] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 803.115452][T23891] RSP: 002b:00007f41a95dec40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 803.115452][T23891] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000413741 [ 803.115452][T23891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 803.115452][T23891] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 803.209049][T12078] betop 0003:8380:1850.0035: unknown main item tag 0x0 [ 803.115452][T23891] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f41a95df6d4 [ 803.115452][T23891] R13: 00000000004bf169 R14: 00000000004e09c8 R15: 00000000ffffffff [ 803.115452][T23891] Kernel Offset: disabled [ 803.115452][T23891] Rebooting in 86400 seconds..