0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x0) tkill(r2, 0x14) [ 1016.092489][T22968] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 09:50:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xfb) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x14}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a03010000000000000000000000000000ffff00000006f68000000000000000000000000000bb00000000000000000000000000000001fe80800000000000000000b800000000aa00000000000000000700000000000000"], 0x58) write(r0, 0x0, 0x0) 09:50:24 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000605000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/56) 09:50:24 executing program 4: unshare(0x20400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00005f2000/0x1000)=nil, 0x1000}, 0x3}) 09:50:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x6, 0xb, 0x9, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x3c) 09:50:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$netlink(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000002c0)={0x10}, 0x10}], 0x1, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x30}, 0x0) 09:50:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 09:50:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xe, @rand_addr=0x4000000}]}}}]}, 0x38}}, 0x0) 09:50:31 executing program 1: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000001180)=""/4096, &(0x7f0000000040)=0x1000) 09:50:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$netlink(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000002c0)={0x10}, 0x10}], 0x1, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x30}, 0x0) 09:50:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x6, 0xb, 0x9, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x3c) 09:50:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 09:50:31 executing program 5: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x0) tkill(r2, 0x14) 09:50:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 09:50:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x6, 0xb, 0x9, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x3c) 09:50:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$netlink(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000002c0)={0x10}, 0x10}], 0x1, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x30}, 0x0) 09:50:31 executing program 1: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000001180)=""/4096, &(0x7f0000000040)=0x1000) 09:50:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$netlink(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000002c0)={0x10}, 0x10}], 0x1, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x30}, 0x0) 09:50:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x6, 0xb, 0x9, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x3c) 09:50:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 09:50:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 09:50:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x100000000, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa}) 09:50:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001d00)={0x2, @raw_data="fc2b0ff1cc0abc4098730b1d1b0a4e5029a4116472e56f24dbfef8769cd9bc54e80cb616210e44b07296304173739df190f8aebf9e5aa1aa36b876282683dbcdc0899119d1e935ea01434701e9d8765d77eff435f7c3661a3cd5eb9927ec5d4cbd5a632a667bd22b072a61e4403cfb00cf8dc1bc817c6428b3a687f86f07add0c0b3581ba0aed583b16601fba831619d5acfc5ad196444f12a57ee5f93b86a54c0dc85ab098abbd3b8243168f7e3296bea7e5c137c73d562945526cd6a2b5cc03df3894db82981b9"}) 09:50:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x800001, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_procfs(0x0, &(0x7f0000000040)='net/de\xe1\xf1zsmp6\x00') 09:50:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010117], [0xc1]}) 09:50:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001d00)={0x2, @raw_data="fc2b0ff1cc0abc4098730b1d1b0a4e5029a4116472e56f24dbfef8769cd9bc54e80cb616210e44b07296304173739df190f8aebf9e5aa1aa36b876282683dbcdc0899119d1e935ea01434701e9d8765d77eff435f7c3661a3cd5eb9927ec5d4cbd5a632a667bd22b072a61e4403cfb00cf8dc1bc817c6428b3a687f86f07add0c0b3581ba0aed583b16601fba831619d5acfc5ad196444f12a57ee5f93b86a54c0dc85ab098abbd3b8243168f7e3296bea7e5c137c73d562945526cd6a2b5cc03df3894db82981b9"}) 09:50:38 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x100000000, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa}) 09:50:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x800001, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_procfs(0x0, &(0x7f0000000040)='net/de\xe1\xf1zsmp6\x00') 09:50:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001d00)={0x2, @raw_data="fc2b0ff1cc0abc4098730b1d1b0a4e5029a4116472e56f24dbfef8769cd9bc54e80cb616210e44b07296304173739df190f8aebf9e5aa1aa36b876282683dbcdc0899119d1e935ea01434701e9d8765d77eff435f7c3661a3cd5eb9927ec5d4cbd5a632a667bd22b072a61e4403cfb00cf8dc1bc817c6428b3a687f86f07add0c0b3581ba0aed583b16601fba831619d5acfc5ad196444f12a57ee5f93b86a54c0dc85ab098abbd3b8243168f7e3296bea7e5c137c73d562945526cd6a2b5cc03df3894db82981b9"}) 09:50:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x100000000, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa}) 09:50:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001d00)={0x2, @raw_data="fc2b0ff1cc0abc4098730b1d1b0a4e5029a4116472e56f24dbfef8769cd9bc54e80cb616210e44b07296304173739df190f8aebf9e5aa1aa36b876282683dbcdc0899119d1e935ea01434701e9d8765d77eff435f7c3661a3cd5eb9927ec5d4cbd5a632a667bd22b072a61e4403cfb00cf8dc1bc817c6428b3a687f86f07add0c0b3581ba0aed583b16601fba831619d5acfc5ad196444f12a57ee5f93b86a54c0dc85ab098abbd3b8243168f7e3296bea7e5c137c73d562945526cd6a2b5cc03df3894db82981b9"}) 09:50:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x800001, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_procfs(0x0, &(0x7f0000000040)='net/de\xe1\xf1zsmp6\x00') 09:50:39 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x100000000, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa}) 09:50:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 09:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x25}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 09:50:46 executing program 0: unshare(0x20400) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) 09:50:46 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x800001, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_procfs(0x0, &(0x7f0000000040)='net/de\xe1\xf1zsmp6\x00') 09:50:46 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:46 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 09:50:46 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:46 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x25}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 09:50:46 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27) read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d) 09:50:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:53 executing program 0: unshare(0x20400) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) 09:50:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x25}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 09:50:53 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 09:50:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27) read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d) 09:50:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x25}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 09:50:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27) read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d) 09:50:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0x70f000) 09:50:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27) read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d) 09:50:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0x70f000) 09:50:59 executing program 0: unshare(0x20400) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) 09:50:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="492e951cbff261cf"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0x70f000) 09:50:59 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}, 0x9}, 0x1c) 09:50:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 09:50:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc0800190001000000", 0x24) 09:50:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc0800190001000000", 0x24) 09:50:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0x70f000) 09:50:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 09:50:59 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)) 09:50:59 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}, 0x9}, 0x1c) 09:50:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc0800190001000000", 0x24) 09:51:06 executing program 0: unshare(0x20400) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) 09:51:06 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)) 09:51:06 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 09:51:06 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc0800190001000000", 0x24) 09:51:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 09:51:06 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}, 0x9}, 0x1c) 09:51:06 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 09:51:06 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}, 0x9}, 0x1c) 09:51:06 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)) 09:51:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 09:51:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 09:51:06 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 09:51:12 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)) 09:51:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 09:51:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x1100}, 0x2c) 09:51:12 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:12 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x100000009, @pix_mp}) 09:51:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic}) 09:51:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 09:51:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x1100}, 0x2c) 09:51:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 09:51:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 09:51:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x1100}, 0x2c) 09:51:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic}) 09:51:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 09:51:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic}) 09:51:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x1100}, 0x2c) 09:51:19 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x1800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ptrace$peek(0x1, r2, &(0x7f0000000580)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="c5", 0x1}, 0x68) prctl$PR_GET_TSC(0x19, &(0x7f00000005c0)) r3 = dup(r1) mmap$perf(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x100) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000540)={0x1, 0x0, {0x8, 0x70000000, 0x7, 0x48c8}}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x101000, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) r5 = semget(0x1, 0x4, 0x600) semop(r5, &(0x7f0000000540), 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000680)=""/117) pwritev(r4, &(0x7f0000000200)=[{&(0x7f00000002c0)="df95256fe2b4f91a6da6dc331183c684d414ef1cde4db75c022104b6b7cc4262e7680a976bb85769ce4299bca577a8b1bd7897f85bcdf53e81de1df5b55168051f15a95d65d5867e056f33e8bc91f85b67d74fa7f06a58ac13dc5d2da10a8cceb13f2be70538e81ebf5f95dd32960a4ce8b0f6320c23581ae409774ef62e84f6b455e838fa", 0x85}, {&(0x7f0000000380)="60b54421c85a411b1d29c16a6b759735994ef9f1d96de72c07ac19b4eb4f8e0216d0e5ab91201f5221985a45c2b56ae211efaaf4a1ec0795c80d4e74d04a5ffa13bb9cfb67e38c819ea451995131005b66c54491c2cc61e2e3cce7e828343fa4188632fa848fe65f6f637db4bcce30a7eeb08c212769ec96affb41", 0x7b}, {&(0x7f0000000400)="1a88cccb26892769a61e0510553e2eae8a46dea0bf75bafb3b0a2c7ef5b68fd8274f953fd6b698df934d584ed85910baae0b891aa65a8df70239103882708d439889547003f090", 0x47}, {&(0x7f0000000480)="4d1b10e4d0d24c86fceac736ac646dcda9219aa8d23d39c2c5ca974bfb78c06ba32b3166a9105ab4cd3805203936fc3e6d3cff75d4b13157de0b4959a2d60804fc8a373462b9c1502c3d1cc99c44c7d79366e284ef38d924d5b4e2cc4ca1d58f752a1b14a8f004cdfb5ecf3b1608454afb32ca78abc62132f2ca6c0d80183090bd26f3527ae1345bc728c9", 0x8b}], 0x4, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x24}, {0x0, 0xfffffffffffff01e}], 0x2, &(0x7f0000000280)={0x0, r6+30000000}) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfff}], 0x1, 0x0) 09:51:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) r1 = accept(r0, 0x0, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:51:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic}) 09:51:19 executing program 5: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0xe) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="c7", 0x1) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23}}], 0x1, 0x0, 0x0) 09:51:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 09:51:19 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:19 executing program 5: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0xe) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="c7", 0x1) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23}}], 0x1, 0x0, 0x0) 09:51:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 09:51:20 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@hoplimit={{0x11, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) 09:51:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x12) 09:51:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 09:51:20 executing program 5: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0xe) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="c7", 0x1) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23}}], 0x1, 0x0, 0x0) 09:51:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2}, 0x8) 09:51:26 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@hoplimit={{0x11, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) 09:51:26 executing program 1: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:51:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x12) 09:51:26 executing program 5: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0xe) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="c7", 0x1) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23}}], 0x1, 0x0, 0x0) 09:51:26 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4122, 0x0) 09:51:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x12) 09:51:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x0) 09:51:26 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4122, 0x0) 09:51:27 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@hoplimit={{0x11, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) 09:51:27 executing program 1: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:51:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x12) 09:51:34 executing program 0: mkdir(&(0x7f0000b0fff8)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 09:51:34 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4122, 0x0) 09:51:34 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@hoplimit={{0x11, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) 09:51:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x0) 09:51:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:34 executing program 1: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:51:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3b}]}) 09:51:34 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4122, 0x0) 09:51:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x0) 09:51:34 executing program 1: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:51:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = epoll_create1(0x0) r3 = dup2(r1, r2) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000001f0001c0000000e92eebc900000000000000000000000000000000000000000000000600000000000000000000000000000000008b074c2f3ba279f61a12741d5de54abb0559f3f1c1baaf9560f64b0801450840653e96fbfcfdd04bac98439d737da81ef24eed38d3202dd046c5ad92f38c906e136487a27b11b4b30c507771eaf597d247513ef5a00ec0d9c679a4fd135f9c3d2a5e357751630e9acabfab0ffa5f0427b93e44069f773c176dc31e17cec5ee14a8ed240176aa08c27814b2dae823f7c83bf6b09ddfcc2e3302ee841c9e8d7fb6ac317a0a4ffec5b7369fceca2b19941bee66adbb387b9fac75f26a64c4f8a88bfd539cb208eb319ecd652519f4d0a8263406"]) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @loopback}}) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0) 09:51:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3b}]}) 09:51:41 executing program 0: mkdir(&(0x7f0000b0fff8)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 09:51:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x0) 09:51:41 executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5b48, 0x40000) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 09:51:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3b}]}) 09:51:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = epoll_create1(0x0) r3 = dup2(r1, r2) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @loopback}}) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0) [ 1093.361983][T24120] misc userio: Invalid payload size 09:51:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x820500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf9d22168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918aef0da5352e6358c8735e799a9f9df2685a80cd8952c05b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1093.545670][T24098] misc userio: Invalid payload size 09:51:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3b}]}) 09:51:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x820500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf9d22168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918aef0da5352e6358c8735e799a9f9df2685a80cd8952c05b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:51:41 executing program 1: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) 09:51:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 09:51:45 executing program 0: mkdir(&(0x7f0000b0fff8)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 09:51:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x820500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf9d22168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918aef0da5352e6358c8735e799a9f9df2685a80cd8952c05b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:51:45 executing program 1: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) 09:51:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 09:51:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = epoll_create1(0x0) r3 = dup2(r1, r2) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @loopback}}) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0) 09:51:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:51:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 09:51:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x820500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf9d22168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918aef0da5352e6358c8735e799a9f9df2685a80cd8952c05b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:51:45 executing program 1: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) 09:51:45 executing program 1: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) 09:51:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 09:51:46 executing program 1: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, "20d1d316f4396853a57368da6ee038fb58c08c5131ea05ee1b3000"}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 09:51:49 executing program 0: mkdir(&(0x7f0000b0fff8)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 09:51:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = epoll_create1(0x0) r3 = dup2(r1, r2) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000001f0001c0000000e92eebc900000000000000000000000000000000000000000000000600000000000000000000000000000000008b074c2f3ba279f61a12741d5de54abb0559f3f1c1baaf9560f64b0801450840653e96fbfcfdd04bac98439d737da81ef24eed38d3202dd046c5ad92f38c906e136487a27b11b4b30c507771eaf597d247513ef5a00ec0d9c679a4fd135f9c3d2a5e357751630e9acabfab0ffa5f0427b93e44069f773c176dc31e17cec5ee14a8ed240176aa08c27814b2dae823f7c83bf6b09ddfcc2e3302ee841c9e8d7fb6ac317a0a4ffec5b7369fceca2b19941bee66adbb387b9fac75f26a64c4f8a88bfd539cb208eb319ecd652519f4d0a8263406"]) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @loopback}}) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0) 09:51:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 09:51:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xe, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 09:51:49 executing program 1: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, "20d1d316f4396853a57368da6ee038fb58c08c5131ea05ee1b3000"}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 09:51:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) read$alg(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x4000) 09:51:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xe, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 09:51:49 executing program 1: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, "20d1d316f4396853a57368da6ee038fb58c08c5131ea05ee1b3000"}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 09:51:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) read$alg(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x4000) 09:51:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 09:51:50 executing program 1: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, "20d1d316f4396853a57368da6ee038fb58c08c5131ea05ee1b3000"}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 09:51:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xe, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 09:51:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x11, 0x64, &(0x7f0000b67000), &(0x7f0000000000)=0xfffffffffffffc97) 09:51:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 09:51:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) read$alg(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x4000) 09:51:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xe, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 09:51:53 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006001700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b00000020d200000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e000000100001eba00000000"], 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400024c, 0x0) 09:51:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:51:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 09:51:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000210007041dfffd946f610500020000001f00000000000800050018000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:51:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) read$alg(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x4000) [ 1106.027892][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:51:54 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x1e, 0x1000000000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 09:51:54 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006001700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b00000020d200000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e000000100001eba00000000"], 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400024c, 0x0) 09:51:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp(0xe3a11377fceb8e72, 0x0, 0x0) 09:51:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x11, 0x64, &(0x7f0000b67000), &(0x7f0000000000)=0xfffffffffffffc97) 09:51:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000210007041dfffd946f610500020000001f00000000000800050018000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:51:54 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006001700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b00000020d200000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e000000100001eba00000000"], 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400024c, 0x0) 09:51:54 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x1e, 0x1000000000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 09:51:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x11, 0x64, &(0x7f0000b67000), &(0x7f0000000000)=0xfffffffffffffc97) [ 1106.371553][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:52:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:52:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp(0xe3a11377fceb8e72, 0x0, 0x0) 09:52:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000210007041dfffd946f610500020000001f00000000000800050018000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:52:01 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x1e, 0x1000000000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 09:52:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x11, 0x64, &(0x7f0000b67000), &(0x7f0000000000)=0xfffffffffffffc97) 09:52:01 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006001700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b00000020d200000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e000000100001eba00000000"], 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400024c, 0x0) [ 1113.174653][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:52:01 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x1e, 0x1000000000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 09:52:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:52:01 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r1}, {r1}], 0x2, &(0x7f00000001c0), 0x0, 0x0) 09:52:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp(0xe3a11377fceb8e72, 0x0, 0x0) 09:52:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000210007041dfffd946f610500020000001f00000000000800050018000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:52:01 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r1}, {r1}], 0x2, &(0x7f00000001c0), 0x0, 0x0) [ 1113.492886][T24582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:52:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:52:07 executing program 2: fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) 09:52:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:52:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp(0xe3a11377fceb8e72, 0x0, 0x0) 09:52:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) 09:52:07 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r1}, {r1}], 0x2, &(0x7f00000001c0), 0x0, 0x0) 09:52:07 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r1}, {r1}], 0x2, &(0x7f00000001c0), 0x0, 0x0) 09:52:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:52:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) 09:52:07 executing program 2: fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) 09:52:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x17b}]}) 09:52:07 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 09:52:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}], 0x4}}], 0x2, 0x0, 0x0) 09:52:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) 09:52:11 executing program 2: fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) 09:52:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x17b}]}) 09:52:11 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x6, 0xd, 0x0, 0x4) 09:52:11 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 09:52:11 executing program 2: fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) 09:52:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) 09:52:11 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 09:52:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x17b}]}) 09:52:11 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x6, 0xd, 0x0, 0x4) 09:52:12 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 09:52:18 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x6, 0xd, 0x0, 0x4) 09:52:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x17b}]}) 09:52:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000005000/0x1000)=nil) 09:52:18 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 09:52:18 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 09:52:18 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev}}}}}}, 0x0) 09:52:18 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x6, 0xd, 0x0, 0x4) 09:52:18 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000140)=""/140, 0x1c4) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 09:52:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000005000/0x1000)=nil) 09:52:18 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 09:52:18 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 09:52:18 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 09:52:18 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 09:52:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000005000/0x1000)=nil) 09:52:18 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000140)=""/140, 0x1c4) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 09:52:18 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 09:52:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000005000/0x1000)=nil) 09:52:22 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r2, 0x0) 09:52:22 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 09:52:22 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 09:52:22 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000140)=""/140, 0x1c4) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 09:52:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 09:52:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000050000010000800ca5b4335c0d51382efa"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0xc0010140]}) 09:52:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 09:52:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c9d000/0x1000)=nil) 09:52:22 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000140)=""/140, 0x1c4) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 09:52:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r4, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:52:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000050000010000800ca5b4335c0d51382efa"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0xc0010140]}) 09:52:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) [ 1138.492618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.498906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.652424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.658619][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.892408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.898467][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.372815][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.379097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.022377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.028414][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000050000010000800ca5b4335c0d51382efa"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0xc0010140]}) 09:52:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0}) 09:52:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x242}}}]}, 0x34}}, 0x0) 09:52:29 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c9d000/0x1000)=nil) 09:52:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) 09:52:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r4, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1141.493009][T24889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:52:29 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c9d000/0x1000)=nil) 09:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000050000010000800ca5b4335c0d51382efa"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0xc0010140]}) 09:52:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x242}}}]}, 0x34}}, 0x0) 09:52:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) [ 1141.772828][T25003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:52:29 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c9d000/0x1000)=nil) 09:52:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r4, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:52:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) 09:52:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) 09:52:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x242}}}]}, 0x34}}, 0x0) 09:52:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0}) 09:52:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) 09:52:36 executing program 4: unshare(0x20400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) 09:52:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r4, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1148.679554][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:52:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) 09:52:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x56, 0x0) lseek(r2, 0x4, 0x0) 09:52:36 executing program 4: unshare(0x20400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) 09:52:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x242}}}]}, 0x34}}, 0x0) 09:52:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}}) [ 1148.962752][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:52:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000408190300000000000000000000020008000200cf00000014000300ffff000000000000655d717070310000"], 0x30}}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 09:52:37 executing program 4: unshare(0x20400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) 09:52:37 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4) [ 1149.199623][T25065] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1149.208052][T25065] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 09:52:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0}) 09:52:40 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}}) 09:52:40 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/seQu%ncer2\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) mmap$xdp(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) 09:52:40 executing program 4: unshare(0x20400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) 09:52:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4) 09:52:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000408190300000000000000000000020008000200cf00000014000300ffff000000000000655d717070310000"], 0x30}}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 1152.892772][T25181] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1152.901084][T25181] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 09:52:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}}) 09:52:41 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4) 09:52:41 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) 09:52:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}}) 09:52:41 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) 09:52:41 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4) [ 1153.752039][T18117] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1153.992019][T18117] usb 6-1: Using ep0 maxpacket: 8 [ 1154.112230][T18117] usb 6-1: config 1 has an invalid interface number: 165 but max is 0 [ 1154.120565][T18117] usb 6-1: config 1 has no interface number 0 [ 1154.126906][T18117] usb 6-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1154.136878][T18117] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1154.146105][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.196476][T18117] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1154.203804][T18117] uvcvideo: No valid video chain found. [ 1154.395276][T18117] usb 6-1: USB disconnect, device number 15 [ 1155.172128][T18117] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1155.412082][T18117] usb 6-1: Using ep0 maxpacket: 8 [ 1155.533511][T18117] usb 6-1: config 1 has an invalid interface number: 165 but max is 0 [ 1155.542014][T18117] usb 6-1: config 1 has no interface number 0 [ 1155.548235][T18117] usb 6-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1155.558231][T18117] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1155.567486][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.616355][T18117] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1155.623548][T18117] uvcvideo: No valid video chain found. [ 1155.815085][T18117] usb 6-1: USB disconnect, device number 16 09:52:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0}) 09:52:45 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) 09:52:45 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) 09:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000540)='\a', 0x1) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1}}], 0x1, 0x0, 0x0) 09:52:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000408190300000000000000000000020008000200cf00000014000300ffff000000000000655d717070310000"], 0x30}}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 09:52:45 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) [ 1157.120590][T25229] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1157.128866][T25229] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 09:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000540)='\a', 0x1) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1}}], 0x1, 0x0, 0x0) 09:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000540)='\a', 0x1) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1}}], 0x1, 0x0, 0x0) 09:52:45 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) 09:52:45 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) 09:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000540)='\a', 0x1) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1}}], 0x1, 0x0, 0x0) [ 1157.412402][T18117] usb 6-1: new high-speed USB device number 17 using dummy_hcd 09:52:45 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) [ 1157.652256][T18117] usb 6-1: Using ep0 maxpacket: 8 [ 1157.772584][T18117] usb 6-1: config 1 has an invalid interface number: 165 but max is 0 [ 1157.780896][T18117] usb 6-1: config 1 has no interface number 0 [ 1157.787479][T18117] usb 6-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1157.797607][T18117] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1157.806828][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.856936][T18117] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1157.864188][T18117] uvcvideo: No valid video chain found. [ 1158.058839][T18117] usb 6-1: USB disconnect, device number 17 09:52:49 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) 09:52:49 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:52:49 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) close(r3) read$FUSE(r2, &(0x7f0000000340), 0x1000) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) 09:52:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000408190300000000000000000000020008000200cf00000014000300ffff000000000000655d717070310000"], 0x30}}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 09:52:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x1e, 0x100000000401}, 0x56}}, 0x0) 09:52:49 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2715, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x3e3) [ 1161.315917][T25276] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1161.320070][T25283] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1161.324272][T25276] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 09:52:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x1e, 0x100000000401}, 0x56}}, 0x0) 09:52:49 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:52:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) [ 1161.572229][T18117] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1161.594151][T25293] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1161.812202][T18117] usb 6-1: Using ep0 maxpacket: 8 [ 1161.932675][T18117] usb 6-1: config 1 has an invalid interface number: 165 but max is 0 [ 1161.941095][T18117] usb 6-1: config 1 has no interface number 0 [ 1161.947506][T18117] usb 6-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1161.957604][T18117] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1161.966837][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:52:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x1e, 0x100000000401}, 0x56}}, 0x0) 09:52:50 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1162.257257][T25299] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1162.296633][T18117] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1162.304331][T18117] uvcvideo: No valid video chain found. 09:52:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x1e, 0x100000000401}, 0x56}}, 0x0) [ 1162.784645][T17716] usb 6-1: USB disconnect, device number 18 [ 1162.875899][T25310] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 09:52:51 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) 09:52:51 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:52:51 executing program 1: write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:52:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 09:52:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x0, 0x8e, 0x32, 0xf7, 0x20, 0xaf0, 0xd257, 0x4e87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xa5, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x11, "850200e21f57eab441f2e157038d3a0873"}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1164.084276][T20291] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1164.092362][T18117] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1164.339135][T20291] usb 6-1: Using ep0 maxpacket: 8 [ 1164.344789][T18117] usb 4-1: Using ep0 maxpacket: 32 [ 1164.462423][T20291] usb 6-1: config 1 has an invalid interface number: 165 but max is 0 [ 1164.470840][T20291] usb 6-1: config 1 has no interface number 0 [ 1164.477196][T20291] usb 6-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1164.487189][T20291] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1164.496461][T20291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.505327][T18117] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 1164.513688][T18117] usb 4-1: config 0 has no interface number 0 [ 1164.520003][T18117] usb 4-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1164.529259][T18117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.539689][T18117] usb 4-1: config 0 descriptor?? [ 1164.577120][T20291] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1164.584718][T20291] uvcvideo: No valid video chain found. [ 1164.779526][T20291] usb 6-1: USB disconnect, device number 19 [ 1164.792475][T18117] hso 4-1:0.15: Failed to find INT IN ep [ 1164.995412][T20291] usb 4-1: USB disconnect, device number 47 [ 1165.782086][T17716] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1166.022140][T17716] usb 4-1: Using ep0 maxpacket: 32 [ 1166.142367][T17716] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 1166.150651][T17716] usb 4-1: config 0 has no interface number 0 [ 1166.157014][T17716] usb 4-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1166.166184][T17716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.175836][T17716] usb 4-1: config 0 descriptor?? [ 1166.436606][T17716] usb 4-1: USB disconnect, device number 48 09:52:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 09:52:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:52:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4008556c, 0x0) 09:52:58 executing program 1: write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:52:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x0, 0x8e, 0x32, 0xf7, 0x20, 0xaf0, 0xd257, 0x4e87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xa5, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x11, "850200e21f57eab441f2e157038d3a0873"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:52:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045440, 0x71dff9) 09:52:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 09:52:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045440, 0x71dff9) 09:52:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4008556c, 0x0) 09:52:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045440, 0x71dff9) 09:52:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4008556c, 0x0) [ 1170.962204][T17716] usb 4-1: new high-speed USB device number 49 using dummy_hcd 09:52:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4008556c, 0x0) 09:52:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) [ 1171.204230][T17716] usb 4-1: Using ep0 maxpacket: 32 [ 1171.324534][T17716] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 1171.332964][T17716] usb 4-1: config 0 has no interface number 0 [ 1171.339210][T17716] usb 4-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1171.348625][T17716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.430215][T17716] usb 4-1: config 0 descriptor?? [ 1171.692318][T17716] hso 4-1:0.15: Failed to find INT IN ep [ 1171.914991][T20291] usb 4-1: USB disconnect, device number 49 09:53:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045440, 0x71dff9) 09:53:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x0, "9461f6befdc37e8c2da5bb513d6764f5983af5e1009ca2ff01b696bad7065666", 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 09:53:06 executing program 1: write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:53:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) 09:53:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x0, 0x8e, 0x32, 0xf7, 0x20, 0xaf0, 0xd257, 0x4e87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xa5, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x11, "850200e21f57eab441f2e157038d3a0873"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:53:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x0, "9461f6befdc37e8c2da5bb513d6764f5983af5e1009ca2ff01b696bad7065666", 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 09:53:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) 09:53:06 executing program 5: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x0, "9461f6befdc37e8c2da5bb513d6764f5983af5e1009ca2ff01b696bad7065666", 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 09:53:06 executing program 1: write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1178.312210][T17716] usb 4-1: new high-speed USB device number 50 using dummy_hcd 09:53:06 executing program 5: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) [ 1178.572164][T17716] usb 4-1: Using ep0 maxpacket: 32 [ 1178.692553][T17716] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 1178.700795][T17716] usb 4-1: config 0 has no interface number 0 [ 1178.707273][T17716] usb 4-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1178.716605][T17716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.726314][T17716] usb 4-1: config 0 descriptor?? [ 1178.972667][T17716] hso 4-1:0.15: Failed to find INT IN ep [ 1179.181119][T20291] usb 4-1: USB disconnect, device number 50 09:53:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) 09:53:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x0, "9461f6befdc37e8c2da5bb513d6764f5983af5e1009ca2ff01b696bad7065666", 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 09:53:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x0, 0x8e, 0x32, 0xf7, 0x20, 0xaf0, 0xd257, 0x4e87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xa5, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x11, "850200e21f57eab441f2e157038d3a0873"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:53:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) 09:53:12 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 09:53:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) [ 1184.642739][T20291] usb 4-1: new high-speed USB device number 51 using dummy_hcd 09:53:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) 09:53:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) [ 1184.894205][T20291] usb 4-1: Using ep0 maxpacket: 32 [ 1185.012373][T20291] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 1185.020553][T20291] usb 4-1: config 0 has no interface number 0 [ 1185.026978][T20291] usb 4-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1185.036134][T20291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.045966][T20291] usb 4-1: config 0 descriptor?? [ 1185.302390][T20291] hso 4-1:0.15: Failed to find INT IN ep [ 1185.508610][T20291] usb 4-1: USB disconnect, device number 51 09:53:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400000000001a7dcf3fa7f5bedbc2b851a6306438f370fe3cd3f34e0453ed9e56df53204d4e4843bc9ea5c9da37495e00c29c571b5edb21786c00dd0b5ae974fde8ba3273130200000000000000", @ANYRES32=0x0, @ANYBLOB="0000ffe600000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000002f0000000000000000000000004e21a5fe8ce02ca979ec1666a0f7a7d2d90e2fea53ad9caceac0d8228c3180c6af42eeb2bca8b70f86b80bc1fa965d73220c1941e50846645203379ee9c1c656009c9f0add0d28238573da17736d9df6dc23f46e5b9daf755744d20e545371d66ccb6b3f808ed314f73ef70db9e97aac9b78b0b2d091be4eaa489026f55b1b1d429e23c40ea62664c9ddb547"], 0x48}}, 0x0) 09:53:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) 09:53:18 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 09:53:18 executing program 1: r0 = socket(0x11, 0x800000003, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x400000014, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f00000000c0)=0x800, 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000088a8"], 0x12) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r2) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 09:53:18 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xca, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:53:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) 09:53:19 executing program 2: clock_adjtime(0xfffffffffffffffd, &(0x7f0000000940)) 09:53:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0xffffff9b) 09:53:19 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xca, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:53:19 executing program 2: clock_adjtime(0xfffffffffffffffd, &(0x7f0000000940)) 09:53:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0xffff8001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x99, 0x3, 0x8}, 0xff}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1191.472108][T25609] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 09:53:25 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 09:53:25 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xca, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:53:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0xffffff9b) 09:53:25 executing program 2: clock_adjtime(0xfffffffffffffffd, &(0x7f0000000940)) 09:53:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0xffff8001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x99, 0x3, 0x8}, 0xff}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:53:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="9636f013ec722a6eb7c605a2", 0xc, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:53:25 executing program 2: clock_adjtime(0xfffffffffffffffd, &(0x7f0000000940)) 09:53:25 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xca, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:53:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0xffffff9b) 09:53:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 09:53:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0xffff8001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x99, 0x3, 0x8}, 0xff}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:53:25 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x4d1b0837) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) 09:53:26 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 09:53:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0xffffff9b) 09:53:26 executing program 2: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 09:53:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0xffff8001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x99, 0x3, 0x8}, 0xff}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:53:26 executing program 2: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 09:53:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:53:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 09:53:34 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x58, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1206.052715][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 1206.064897][ C0] clocksource: 'acpi_pm' wd_now: 786f5c wd_last: c0b6b4 mask: ffffff [ 1206.075106][ C0] clocksource: 'tsc' cs_now: 28acf94e894 cs_last: 2867ffca9b7 mask: ffffffffffffffff [ 1206.086759][ C0] tsc: Marking TSC unstable due to clocksource watchdog 09:53:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)) 09:53:34 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x4000000, &(0x7f0000000040)=[{&(0x7f0000000080)="210000001a008100a00f2200db4cb904024865160b000000d4326efb05001b4006", 0x21}], 0x1}, 0x0) 09:53:34 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) [ 1206.112812][T20291] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 1206.122474][T20291] sched_clock: Marking unstable (1206170968689, -58180817)<-(1206114438932, -1651083) [ 1206.122787][T25782] clocksource: Switched to clocksource acpi_pm 09:53:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)) 09:53:34 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) 09:53:34 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x4000000, &(0x7f0000000040)=[{&(0x7f0000000080)="210000001a008100a00f2200db4cb904024865160b000000d4326efb05001b4006", 0x21}], 0x1}, 0x0) 09:53:34 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) 09:53:34 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) 09:53:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)) [ 1211.082061][T20291] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1211.322180][T20291] usb 1-1: Using ep0 maxpacket: 8 [ 1211.442163][T20291] usb 1-1: config 1 has an invalid interface number: 5 but max is 1 [ 1211.450314][T20291] usb 1-1: config 1 has no interface number 0 [ 1211.456674][T20291] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1211.466543][T20291] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1211.632271][T20291] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1211.641397][T20291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.649627][T20291] usb 1-1: Product: syz [ 1211.653921][T20291] usb 1-1: Manufacturer: syz [ 1211.658556][T20291] usb 1-1: SerialNumber: syz [ 1211.703669][T20291] cdc_ncm 1-1:1.5: bind() failure 09:53:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff7}) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 09:53:39 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x4000000, &(0x7f0000000040)=[{&(0x7f0000000080)="210000001a008100a00f2200db4cb904024865160b000000d4326efb05001b4006", 0x21}], 0x1}, 0x0) 09:53:39 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) 09:53:39 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x58, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 09:53:39 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)) 09:53:39 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) [ 1211.788113][T20291] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1211.836643][T20291] usb 1-1: USB disconnect, device number 16 09:53:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @raw_data="b92d4dfdbbc54a5e5da8a38ee28ead5c649bc851c9edc9fcff8fd7b5ae3e19d9eccf0d930b72073b92ed77a6c99ffe790dfd6125e6886b52c2e461dcd9f35f7fa1fd6798478051dce9262bf9407ebff6526deddda1db927ffae92b4f2176f653a43474a717fab7aa405fa36b40504b52d79275ffdb010e5d76ed15fe61c8f7cde194986dc6cd731af050eb7102779ff3bcfad9a7c46f646e90255dac60fab66519006e3ecfe4bee05165a4583705f72619da48a40cc3de901abda28fd3fc04bb2b826cd82e6d5668"}) 09:53:40 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x4000000, &(0x7f0000000040)=[{&(0x7f0000000080)="210000001a008100a00f2200db4cb904024865160b000000d4326efb05001b4006", 0x21}], 0x1}, 0x0) 09:53:40 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x58, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 09:53:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) 09:53:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @uid}]}]}, 0x20}}, 0x0) 09:53:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @raw_data="b92d4dfdbbc54a5e5da8a38ee28ead5c649bc851c9edc9fcff8fd7b5ae3e19d9eccf0d930b72073b92ed77a6c99ffe790dfd6125e6886b52c2e461dcd9f35f7fa1fd6798478051dce9262bf9407ebff6526deddda1db927ffae92b4f2176f653a43474a717fab7aa405fa36b40504b52d79275ffdb010e5d76ed15fe61c8f7cde194986dc6cd731af050eb7102779ff3bcfad9a7c46f646e90255dac60fab66519006e3ecfe4bee05165a4583705f72619da48a40cc3de901abda28fd3fc04bb2b826cd82e6d5668"}) 09:53:47 executing program 0: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0), &(0x7f0000000300)={'enc=', 'oaep', ' \tash=', {'sha256-ssse3\x00'}}, 0x0, 0x0) 09:53:47 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x58, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 09:53:47 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae43", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:53:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 09:53:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @uid}]}]}, 0x20}}, 0x0) 09:53:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @raw_data="b92d4dfdbbc54a5e5da8a38ee28ead5c649bc851c9edc9fcff8fd7b5ae3e19d9eccf0d930b72073b92ed77a6c99ffe790dfd6125e6886b52c2e461dcd9f35f7fa1fd6798478051dce9262bf9407ebff6526deddda1db927ffae92b4f2176f653a43474a717fab7aa405fa36b40504b52d79275ffdb010e5d76ed15fe61c8f7cde194986dc6cd731af050eb7102779ff3bcfad9a7c46f646e90255dac60fab66519006e3ecfe4bee05165a4583705f72619da48a40cc3de901abda28fd3fc04bb2b826cd82e6d5668"}) 09:53:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @uid}]}]}, 0x20}}, 0x0) 09:53:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @raw_data="b92d4dfdbbc54a5e5da8a38ee28ead5c649bc851c9edc9fcff8fd7b5ae3e19d9eccf0d930b72073b92ed77a6c99ffe790dfd6125e6886b52c2e461dcd9f35f7fa1fd6798478051dce9262bf9407ebff6526deddda1db927ffae92b4f2176f653a43474a717fab7aa405fa36b40504b52d79275ffdb010e5d76ed15fe61c8f7cde194986dc6cd731af050eb7102779ff3bcfad9a7c46f646e90255dac60fab66519006e3ecfe4bee05165a4583705f72619da48a40cc3de901abda28fd3fc04bb2b826cd82e6d5668"}) [ 1219.235900][T25876] ptrace attach of "/root/syz-executor.4"[25865] was attempted by "/root/syz-executor.4"[25876] 09:53:47 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae43", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:53:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000180)='T', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 09:53:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @uid}]}]}, 0x20}}, 0x0) 09:53:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e8afadd8f11a40a4db2d37ffe9fdd76311"}}]}, 0x150}}, 0x0) 09:53:53 executing program 0: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0), &(0x7f0000000300)={'enc=', 'oaep', ' \tash=', {'sha256-ssse3\x00'}}, 0x0, 0x0) 09:53:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000180)='T', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 09:53:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e8afadd8f11a40a4db2d37ffe9fdd76311"}}]}, 0x150}}, 0x0) 09:53:53 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae43", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:53:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x100a0}) 09:53:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 09:53:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e8afadd8f11a40a4db2d37ffe9fdd76311"}}]}, 0x150}}, 0x0) 09:53:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000180)='T', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 09:53:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x100a0}) 09:53:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000180)='T', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 09:53:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e8afadd8f11a40a4db2d37ffe9fdd76311"}}]}, 0x150}}, 0x0) 09:53:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') lseek(r0, 0x0, 0x1) 09:53:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x100a0}) 09:54:00 executing program 0: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0), &(0x7f0000000300)={'enc=', 'oaep', ' \tash=', {'sha256-ssse3\x00'}}, 0x0, 0x0) 09:54:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') lseek(r0, 0x0, 0x1) 09:54:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 09:54:00 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae43", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:54:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@broadcast, @broadcast, [{}], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "89bdf5", 0x30, 0x0, 0x0, @mcast1, @ipv4={[], [], @multicast1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "769132", 0x0, 0x0, 0x0, @loopback, @empty}}}}}}}}, 0x0) 09:54:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x100a0}) 09:54:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') lseek(r0, 0x0, 0x1) 09:54:00 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:00 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') lseek(r0, 0x0, 0x1) 09:54:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@broadcast, @broadcast, [{}], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "89bdf5", 0x30, 0x0, 0x0, @mcast1, @ipv4={[], [], @multicast1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "769132", 0x0, 0x0, 0x0, @loopback, @empty}}}}}}}}, 0x0) 09:54:01 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:07 executing program 0: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0), &(0x7f0000000300)={'enc=', 'oaep', ' \tash=', {'sha256-ssse3\x00'}}, 0x0, 0x0) 09:54:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 09:54:07 executing program 3: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:07 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@broadcast, @broadcast, [{}], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "89bdf5", 0x30, 0x0, 0x0, @mcast1, @ipv4={[], [], @multicast1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "769132", 0x0, 0x0, 0x0, @loopback, @empty}}}}}}}}, 0x0) 09:54:07 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0xec) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="6011", 0x20000882}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0xfffffffffffffd63) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r2, 0x10001) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40), 0x40000000000008b, 0x0) connect(r3, &(0x7f0000000040)=@nl=@unspec, 0x80) 09:54:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 09:54:07 executing program 3: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@broadcast, @broadcast, [{}], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "89bdf5", 0x30, 0x0, 0x0, @mcast1, @ipv4={[], [], @multicast1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "769132", 0x0, 0x0, 0x0, @loopback, @empty}}}}}}}}, 0x0) 09:54:08 executing program 3: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 09:54:08 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0xec) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="6011", 0x20000882}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0xfffffffffffffd63) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r2, 0x10001) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40), 0x40000000000008b, 0x0) connect(r3, &(0x7f0000000040)=@nl=@unspec, 0x80) 09:54:08 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000680)={@local, @remote, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x1e, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 09:54:15 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x80006080045006, 0x0) 09:54:15 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 09:54:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 09:54:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0xec) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="6011", 0x20000882}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0xfffffffffffffd63) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r2, 0x10001) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40), 0x40000000000008b, 0x0) connect(r3, &(0x7f0000000040)=@nl=@unspec, 0x80) 09:54:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_ACT={0x1c, 0x1, @m_ife={0x18, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}}}}]}}]}, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 09:54:15 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000680)={@local, @remote, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x1e, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 09:54:15 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 09:54:15 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000680)={@local, @remote, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x1e, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 09:54:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 09:54:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0xec) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="6011", 0x20000882}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0xfffffffffffffd63) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r2, 0x10001) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40), 0x40000000000008b, 0x0) connect(r3, &(0x7f0000000040)=@nl=@unspec, 0x80) 09:54:15 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x80006080045006, 0x0) 09:54:15 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000680)={@local, @remote, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x1e, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) [ 1253.224037][T26091] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1253.232558][T26091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:54:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 09:54:22 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 09:54:22 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x80006080045006, 0x0) 09:54:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x303, 0x0, 0x4, 0x0, 0x0}) 09:54:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_ACT={0x1c, 0x1, @m_ife={0x18, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}}}}]}}]}, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 09:54:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x10) [ 1254.322404][T26100] device syz_tun entered promiscuous mode [ 1254.367488][T26097] device syz_tun left promiscuous mode 09:54:22 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) [ 1254.424350][T26106] device syz_tun entered promiscuous mode [ 1254.439804][T26097] device syz_tun left promiscuous mode 09:54:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x303, 0x0, 0x4, 0x0, 0x0}) 09:54:22 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007d40)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ac", 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0xa}}], 0x20}], 0x1, 0x0) 09:54:22 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x80006080045006, 0x0) 09:54:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x10) 09:54:22 executing program 1: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0) [ 1254.686219][T26123] device syz_tun entered promiscuous mode [ 1254.720213][T26122] device syz_tun left promiscuous mode 09:54:22 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007d40)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ac", 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0xa}}], 0x20}], 0x1, 0x0) 09:54:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x303, 0x0, 0x4, 0x0, 0x0}) 09:54:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x10) 09:54:23 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1255.037560][T26142] device syz_tun entered promiscuous mode [ 1255.070081][T26138] device syz_tun left promiscuous mode 09:54:29 executing program 1: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0) 09:54:29 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:54:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x303, 0x0, 0x4, 0x0, 0x0}) 09:54:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x10) 09:54:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_ACT={0x1c, 0x1, @m_ife={0x18, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}}}}]}}]}, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 09:54:29 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007d40)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ac", 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0xa}}], 0x20}], 0x1, 0x0) [ 1261.649114][T26251] device syz_tun entered promiscuous mode [ 1261.673738][T26250] device syz_tun left promiscuous mode 09:54:29 executing program 1: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0) 09:54:29 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007d40)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ac", 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0xa}}], 0x20}], 0x1, 0x0) 09:54:29 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:54:29 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:54:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "b060"}, @global=@item_012={0x2, 0x1, 0x0, "24cd"}]}}, 0x0}, 0x0) 09:54:30 executing program 1: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0) [ 1262.232596][T17716] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1262.602267][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.613505][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1262.626506][T17716] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 1262.635780][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.645640][T17716] usb 5-1: config 0 descriptor?? [ 1263.116888][T17716] greenasia 0003:0E8F:0012.001A: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 1263.128587][T17716] greenasia 0003:0E8F:0012.001A: no output reports found [ 1263.315308][T20291] usb 5-1: USB disconnect, device number 40 [ 1264.092167][T20291] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1264.452332][T20291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.463465][T20291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1264.476470][T20291] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 1264.485719][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.495653][T20291] usb 5-1: config 0 descriptor?? [ 1264.796750][T20291] greenasia 0003:0E8F:0012.001B: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 1264.808517][T20291] greenasia 0003:0E8F:0012.001B: no output reports found [ 1264.963773][T17716] usb 5-1: USB disconnect, device number 41 09:54:36 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_ACT={0x1c, 0x1, @m_ife={0x18, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}}}}]}}]}, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 09:54:36 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:54:36 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:54:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 09:54:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 09:54:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "b060"}, @global=@item_012={0x2, 0x1, 0x0, "24cd"}]}}, 0x0}, 0x0) 09:54:36 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x3fff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:54:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 09:54:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c481fbd6e234c43b7920220fbec4a130db6e6f2c29af96311d39962100001600380001000900ff0301"], 0x45) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0, 0x0) 09:54:37 executing program 2: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000000)="01000000a9", 0x5, 0xfffffffffffffffc) [ 1269.094183][T17716] usb 5-1: new high-speed USB device number 42 using dummy_hcd 09:54:37 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 09:54:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) [ 1269.463224][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.474306][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1269.487309][T17716] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 1269.496521][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.506237][T17716] usb 5-1: config 0 descriptor?? [ 1269.987494][T17716] greenasia 0003:0E8F:0012.001C: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 1269.999290][T17716] greenasia 0003:0E8F:0012.001C: no output reports found [ 1270.200050][T17716] usb 5-1: USB disconnect, device number 42 09:54:44 executing program 2: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000000)="01000000a9", 0x5, 0xfffffffffffffffc) 09:54:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f00000000c0)={0x400, "d29b8d2191596fd4fce7b249e887a94cc71e0b2092e09be7d66c9335d2812e5c", 0x1}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x102) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 09:54:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c481fbd6e234c43b7920220fbec4a130db6e6f2c29af96311d39962100001600380001000900ff0301"], 0x45) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0, 0x0) 09:54:44 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 09:54:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 09:54:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "b060"}, @global=@item_012={0x2, 0x1, 0x0, "24cd"}]}}, 0x0}, 0x0) 09:54:44 executing program 2: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000000)="01000000a9", 0x5, 0xfffffffffffffffc) 09:54:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c481fbd6e234c43b7920220fbec4a130db6e6f2c29af96311d39962100001600380001000900ff0301"], 0x45) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0, 0x0) 09:54:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0xfd, 0x3, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 09:54:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 09:54:44 executing program 2: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000000)="01000000a9", 0x5, 0xfffffffffffffffc) [ 1276.383162][T17716] usb 5-1: new high-speed USB device number 43 using dummy_hcd 09:54:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c481fbd6e234c43b7920220fbec4a130db6e6f2c29af96311d39962100001600380001000900ff0301"], 0x45) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 1276.782206][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.793387][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1276.806386][T17716] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 1276.815581][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.825284][T17716] usb 5-1: config 0 descriptor?? [ 1277.307949][T17716] greenasia 0003:0E8F:0012.001D: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 1277.319636][T17716] greenasia 0003:0E8F:0012.001D: no output reports found [ 1277.511224][T17716] usb 5-1: USB disconnect, device number 43 09:54:51 executing program 0: getrandom(&(0x7f0000000000)=""/69, 0x12, 0x0) 09:54:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 09:54:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0xfd, 0x3, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 09:54:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x7fffffff, 0x4) 09:54:51 executing program 3: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000000000001, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000080)) 09:54:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "b060"}, @global=@item_012={0x2, 0x1, 0x0, "24cd"}]}}, 0x0}, 0x0) [ 1283.404389][T26481] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 1283.413277][T26481] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 1283.421518][T26481] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1283.429915][T26481] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 09:54:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x7fffffff, 0x4) 09:54:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0xfd, 0x3, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 09:54:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 09:54:51 executing program 3: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000000000001, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000080)) [ 1283.743498][T20291] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1283.865920][T26601] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 1283.874512][T26601] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 1283.883003][T26601] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1283.891216][T26601] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 09:54:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x7fffffff, 0x4) 09:54:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0xfd, 0x3, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 1284.142573][T20291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.153749][T20291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1284.167066][T20291] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 1284.176331][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.231752][T20291] usb 5-1: config 0 descriptor?? [ 1284.717447][T20291] greenasia 0003:0E8F:0012.001E: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 1284.729168][T20291] greenasia 0003:0E8F:0012.001E: no output reports found [ 1284.919588][T17716] usb 5-1: USB disconnect, device number 44 09:54:58 executing program 0: getrandom(&(0x7f0000000000)=""/69, 0x12, 0x0) 09:54:58 executing program 3: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000000000001, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000080)) 09:54:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x7fffffff, 0x4) 09:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 09:54:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000300)=@ethtool_cmd={0x23}}) 09:54:58 executing program 4: set_mempolicy(0x1, &(0x7f0000001f40)=0x40, 0xab0) 09:54:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000300)=@ethtool_cmd={0x23}}) 09:54:58 executing program 4: set_mempolicy(0x1, &(0x7f0000001f40)=0x40, 0xab0) [ 1290.625727][T26633] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 1290.634168][T26633] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 1290.642634][T26633] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1290.650861][T26633] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 09:54:58 executing program 3: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000000000001, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000080)) 09:54:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 09:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 09:54:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') [ 1291.010025][T26655] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 1291.018626][T26655] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 1291.027069][T26655] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1291.035402][T26655] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 1293.212670][T15818] kworker/dying (15818) used greatest stack depth: 51472 bytes left 09:55:03 executing program 0: getrandom(&(0x7f0000000000)=""/69, 0x12, 0x0) 09:55:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000300)=@ethtool_cmd={0x23}}) 09:55:03 executing program 4: set_mempolicy(0x1, &(0x7f0000001f40)=0x40, 0xab0) 09:55:03 executing program 3: unshare(0x20040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r0}) 09:55:03 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 09:55:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b0900010001010fd83ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'}) [ 1295.624527][T26669] device lo entered promiscuous mode [ 1295.645312][T26669] device lo left promiscuous mode 09:55:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000300)=@ethtool_cmd={0x23}}) 09:55:03 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 09:55:03 executing program 4: set_mempolicy(0x1, &(0x7f0000001f40)=0x40, 0xab0) 09:55:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x4fffe) accept4(r2, 0x0, 0x0, 0x0) 09:55:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) 09:55:04 executing program 3: unshare(0x20040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r0}) [ 1295.979579][T26788] device lo entered promiscuous mode 09:55:08 executing program 0: getrandom(&(0x7f0000000000)=""/69, 0x12, 0x0) 09:55:08 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 09:55:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) 09:55:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b0900010001010fd83ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'}) 09:55:08 executing program 3: unshare(0x20040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r0}) 09:55:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x4fffe) accept4(r2, 0x0, 0x0, 0x0) 09:55:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x4fffe) accept4(r2, 0x0, 0x0, 0x0) [ 1300.697913][T26815] device lo left promiscuous mode 09:55:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) 09:55:08 executing program 3: unshare(0x20040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r0}) 09:55:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) 09:55:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x4fffe) accept4(r2, 0x0, 0x0, 0x0) [ 1300.942117][T20291] usb 2-1: new high-speed USB device number 22 using dummy_hcd 09:55:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b0900010001010fd83ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'}) [ 1301.146194][T26835] device lo entered promiscuous mode [ 1301.184866][T26835] device lo left promiscuous mode [ 1301.202242][T20291] usb 2-1: Using ep0 maxpacket: 8 [ 1301.322818][T20291] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1301.331124][T20291] usb 2-1: config 0 has no interface number 0 [ 1301.337540][T20291] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1301.346781][T20291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.357441][T20291] usb 2-1: config 0 descriptor?? [ 1301.426452][T20291] streamzap 2-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1301.627000][T17716] usb 2-1: USB disconnect, device number 22 [ 1302.402071][T17716] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1302.652108][T17716] usb 2-1: Using ep0 maxpacket: 8 [ 1302.782266][T17716] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1302.790621][T17716] usb 2-1: config 0 has no interface number 0 [ 1302.797012][T17716] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1302.806221][T17716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.815934][T17716] usb 2-1: config 0 descriptor?? [ 1302.856395][T17716] streamzap 2-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1303.054498][T20291] usb 2-1: USB disconnect, device number 23 09:55:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "68b49a097c19d58f697be7ca7d25720adf780fd4462459ada4ac6fb3bc11b49857d192b15f0a484fbdff012eb01ce9d2667b4eec4ed75b7fa91830a6fc6d4f07e9e0118eb0947895524a393bacc36dc756ac08d2d10ee4ac3efb565dd5c490ed771aeb475da730614a1cd9c8f14a13ae9bb1be9e8da6d6ad42bc370f421059cb735ecf14409611209619bea56622376703e53d"}, 0x97) 09:55:13 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) unshare(0x2000400) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x200}, 0x0, 0x0, &(0x7f0000000200), 0x0) 09:55:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@dev, @in6=@local}]}, 0x38}}, 0x4000) 09:55:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b0900010001010fd83ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'}) 09:55:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 09:55:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) [ 1305.701269][T26857] device lo entered promiscuous mode 09:55:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "68b49a097c19d58f697be7ca7d25720adf780fd4462459ada4ac6fb3bc11b49857d192b15f0a484fbdff012eb01ce9d2667b4eec4ed75b7fa91830a6fc6d4f07e9e0118eb0947895524a393bacc36dc756ac08d2d10ee4ac3efb565dd5c490ed771aeb475da730614a1cd9c8f14a13ae9bb1be9e8da6d6ad42bc370f421059cb735ecf14409611209619bea56622376703e53d"}, 0x97) [ 1305.752738][T26857] device lo left promiscuous mode 09:55:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "68b49a097c19d58f697be7ca7d25720adf780fd4462459ada4ac6fb3bc11b49857d192b15f0a484fbdff012eb01ce9d2667b4eec4ed75b7fa91830a6fc6d4f07e9e0118eb0947895524a393bacc36dc756ac08d2d10ee4ac3efb565dd5c490ed771aeb475da730614a1cd9c8f14a13ae9bb1be9e8da6d6ad42bc370f421059cb735ecf14409611209619bea56622376703e53d"}, 0x97) 09:55:13 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) unshare(0x2000400) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x200}, 0x0, 0x0, &(0x7f0000000200), 0x0) 09:55:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@dev, @in6=@local}]}, 0x38}}, 0x4000) [ 1305.972283][T20291] usb 2-1: new high-speed USB device number 24 using dummy_hcd 09:55:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "68b49a097c19d58f697be7ca7d25720adf780fd4462459ada4ac6fb3bc11b49857d192b15f0a484fbdff012eb01ce9d2667b4eec4ed75b7fa91830a6fc6d4f07e9e0118eb0947895524a393bacc36dc756ac08d2d10ee4ac3efb565dd5c490ed771aeb475da730614a1cd9c8f14a13ae9bb1be9e8da6d6ad42bc370f421059cb735ecf14409611209619bea56622376703e53d"}, 0x97) 09:55:14 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 09:55:14 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) unshare(0x2000400) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x200}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 1306.215385][T20291] usb 2-1: Using ep0 maxpacket: 8 09:55:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@dev, @in6=@local}]}, 0x38}}, 0x4000) 09:55:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000068}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:55:14 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) unshare(0x2000400) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x200}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 1306.332460][T20291] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1306.340812][T20291] usb 2-1: config 0 has no interface number 0 [ 1306.347590][T20291] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1306.356879][T20291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.496674][T20291] usb 2-1: config 0 descriptor?? [ 1306.550019][T20291] streamzap 2-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1306.750299][T20291] usb 2-1: USB disconnect, device number 24 09:55:15 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) [ 1307.562098][T17716] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1307.802155][T17716] usb 2-1: Using ep0 maxpacket: 8 [ 1307.922357][T17716] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1307.930578][T17716] usb 2-1: config 0 has no interface number 0 [ 1307.936995][T17716] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1307.946252][T17716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.956188][T17716] usb 2-1: config 0 descriptor?? [ 1307.996118][T17716] streamzap 2-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1308.198794][T17716] usb 2-1: USB disconnect, device number 25 09:55:20 executing program 0: r0 = socket(0x2, 0x3, 0x85) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 09:55:20 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 09:55:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@dev, @in6=@local}]}, 0x38}}, 0x4000) 09:55:20 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 09:55:20 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001340)=""/4096}], 0x2000000000000076, 0x0) 09:55:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000068}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:55:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x100008000000007, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0xffff7fffffffffaf, &(0x7f0000000000)) 09:55:21 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 09:55:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000068}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:55:21 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x8100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="af83ae8c60", 0x5}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 09:55:21 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1313.172138][T17716] usb 2-1: new high-speed USB device number 26 using dummy_hcd 09:55:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000068}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1313.412373][T17716] usb 2-1: Using ep0 maxpacket: 8 [ 1313.532766][T17716] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1313.541099][T17716] usb 2-1: config 0 has no interface number 0 [ 1313.547478][T17716] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1313.556675][T17716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.566516][T17716] usb 2-1: config 0 descriptor?? [ 1313.606151][T17716] streamzap 2-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1313.809036][T17716] usb 2-1: USB disconnect, device number 26 09:55:28 executing program 0: r0 = socket(0x2, 0x3, 0x85) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 09:55:28 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x8100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="af83ae8c60", 0x5}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 09:55:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x100008000000007, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0xffff7fffffffffaf, &(0x7f0000000000)) 09:55:28 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000001}, 0x10) 09:55:28 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "b605"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 09:55:28 executing program 1: unshare(0x24020400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) 09:55:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x100008000000007, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0xffff7fffffffffaf, &(0x7f0000000000)) 09:55:28 executing program 1: unshare(0x24020400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) 09:55:28 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x8100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="af83ae8c60", 0x5}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 09:55:28 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000001}, 0x10) 09:55:28 executing program 1: unshare(0x24020400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) [ 1320.432168][T20291] usb 5-1: new high-speed USB device number 45 using dummy_hcd 09:55:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x100008000000007, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0xffff7fffffffffaf, &(0x7f0000000000)) [ 1320.792342][T20291] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1320.800610][T20291] usb 5-1: config 0 has no interface number 0 [ 1320.806967][T20291] usb 5-1: config 0 interface 105 has no altsetting 0 [ 1320.813993][T20291] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1320.823237][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.833313][T20291] usb 5-1: config 0 descriptor?? [ 1321.092343][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1323.262441][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1323.273088][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1323.285238][T20291] asix: probe of 5-1:0.105 failed with error -71 [ 1323.297338][T20291] usb 5-1: USB disconnect, device number 45 [ 1324.012483][T20291] usb 5-1: new high-speed USB device number 46 using dummy_hcd 09:55:32 executing program 0: r0 = socket(0x2, 0x3, 0x85) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 09:55:32 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x8100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="af83ae8c60", 0x5}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 09:55:32 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000001}, 0x10) 09:55:32 executing program 1: unshare(0x24020400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) [ 1324.402761][T20291] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1324.411276][T20291] usb 5-1: config 0 has no interface number 0 [ 1324.417691][T20291] usb 5-1: config 0 interface 105 has no altsetting 0 [ 1324.424928][T20291] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1324.434280][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.483706][T20291] usb 5-1: config 0 descriptor?? 09:55:32 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "b605"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 09:55:32 executing program 3: socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000000)="db40a2ca3a", 0x5) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 09:55:32 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) unshare(0x400) fcntl$lock(r0, 0x7, 0x0) 09:55:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6a568600bc2482da3fc3"], 0x0, 0xa}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cf8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:32 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000001}, 0x10) [ 1324.785173][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1324.796233][T20291] asix: probe of 5-1:0.105 failed with error -71 [ 1324.887401][T20291] usb 5-1: USB disconnect, device number 46 09:55:33 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) unshare(0x400) fcntl$lock(r0, 0x7, 0x0) 09:55:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000980)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}}, 0x0) 09:55:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6a568600bc2482da3fc3"], 0x0, 0xa}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cf8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1325.252192][T20291] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1325.612486][T20291] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1325.621123][T20291] usb 5-1: config 0 has no interface number 0 [ 1325.627506][T20291] usb 5-1: config 0 interface 105 has no altsetting 0 [ 1325.634927][T20291] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1325.644271][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.654192][T20291] usb 5-1: config 0 descriptor?? [ 1325.912498][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1328.082283][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1328.093008][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1328.104485][T20291] asix: probe of 5-1:0.105 failed with error -71 [ 1328.116326][T20291] usb 5-1: USB disconnect, device number 47 09:55:39 executing program 0: r0 = socket(0x2, 0x3, 0x85) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 09:55:39 executing program 3: socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000000)="db40a2ca3a", 0x5) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 09:55:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a52474252bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 09:55:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "b605"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 09:55:39 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) unshare(0x400) fcntl$lock(r0, 0x7, 0x0) 09:55:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6a568600bc2482da3fc3"], 0x0, 0xa}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cf8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a52474252bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 09:55:39 executing program 3: socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000000)="db40a2ca3a", 0x5) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 09:55:39 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) unshare(0x400) fcntl$lock(r0, 0x7, 0x0) 09:55:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6a568600bc2482da3fc3"], 0x0, 0xa}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cf8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a52474252bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) [ 1331.912100][T20291] usb 5-1: new high-speed USB device number 48 using dummy_hcd 09:55:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) [ 1332.322406][T20291] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1332.330778][T20291] usb 5-1: config 0 has no interface number 0 [ 1332.337125][T20291] usb 5-1: config 0 interface 105 has no altsetting 0 [ 1332.344157][T20291] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1332.353408][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.363184][T20291] usb 5-1: config 0 descriptor?? [ 1332.622468][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1334.792256][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1334.802810][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1334.814342][T20291] asix: probe of 5-1:0.105 failed with error -71 [ 1334.826002][T20291] usb 5-1: USB disconnect, device number 48 09:55:46 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000010902120001000000000904690c00000000000000245c5a61b27dab07191ea29ef02c9ed83c66091412bfdc6a30ff656dbd6154a85e4b3ce801302e75283b9d3b30ee454ece3ec60dc49fe14af9eb1afcfcdac9eb9d692316fd7ef8a8dd62b002699b7f733667c88f6f74a11a5afdee8c3f041fe06bee4afb2324d0df1fd4d606a3b1bd7e5199"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "b605"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 09:55:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x7, 0x2) 09:55:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8cb9b36c5926b76a52474252bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 09:55:46 executing program 3: socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000000)="db40a2ca3a", 0x5) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 09:55:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 09:55:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 09:55:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x28, r1, 0x311}, 0x234}}, 0x0) 09:55:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 09:55:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x32e, 0x2e, 0x2e, 0x80ffff]}, 0x3c) [ 1338.200377][T27379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:55:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) [ 1338.293218][T20291] usb 5-1: new high-speed USB device number 49 using dummy_hcd 09:55:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x32e, 0x2e, 0x2e, 0x80ffff]}, 0x3c) 09:55:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) [ 1338.652332][T20291] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1338.660632][T20291] usb 5-1: config 0 has no interface number 0 [ 1338.667298][T20291] usb 5-1: config 0 interface 105 has no altsetting 0 [ 1338.674300][T20291] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1338.683687][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.693722][T20291] usb 5-1: config 0 descriptor?? [ 1338.952515][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1341.122450][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1341.132919][T20291] asix 5-1:0.105 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1341.144251][T20291] asix: probe of 5-1:0.105 failed with error -71 [ 1341.155299][T20291] usb 5-1: USB disconnect, device number 49 09:55:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 09:55:53 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dc00000000cfe47bf070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x0, 0x5f}, 0xfe58) 09:55:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x28, r1, 0x311}, 0x234}}, 0x0) 09:55:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x32e, 0x2e, 0x2e, 0x80ffff]}, 0x3c) 09:55:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000c00", 0x20) 09:55:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x31, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:55:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) [ 1345.337732][T27513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:55:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x28, r1, 0x311}, 0x234}}, 0x0) 09:55:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x32e, 0x2e, 0x2e, 0x80ffff]}, 0x3c) 09:55:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000c00", 0x20) 09:55:53 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "24b0eb7946c64808cb757347a4ebf52dddc47b4969c2dfb993300525cff83cc7e9"}, 0x2c) [ 1345.547258][T27527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:55:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000c00", 0x20) 09:55:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) [ 1345.633960][T17716] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1345.873187][T17716] usb 5-1: Using ep0 maxpacket: 8 [ 1345.992309][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.003330][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1346.016549][T17716] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.40 [ 1346.025785][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.035427][T17716] usb 5-1: config 0 descriptor?? [ 1346.520547][T17716] wacom 0003:056A:0031.001F: unknown main item tag 0x0 [ 1346.527928][T17716] wacom 0003:056A:0031.001F: unknown main item tag 0x0 [ 1346.535184][T17716] wacom 0003:056A:0031.001F: unknown main item tag 0x0 [ 1346.542394][T17716] wacom 0003:056A:0031.001F: unknown main item tag 0x0 [ 1346.549415][T17716] wacom 0003:056A:0031.001F: unknown main item tag 0x0 [ 1346.556611][T17716] wacom 0003:056A:0031.001F: unknown main item tag 0x0 [ 1346.565621][T17716] wacom 0003:056A:0031.001F: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.4-1/input0 [ 1346.716188][T17716] usb 5-1: USB disconnect, device number 50 [ 1347.482329][T17716] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1347.722042][T17716] usb 5-1: Using ep0 maxpacket: 8 [ 1347.842229][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.853377][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1347.866377][T17716] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.40 [ 1347.875603][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.885363][T17716] usb 5-1: config 0 descriptor?? [ 1348.185982][T17716] wacom 0003:056A:0031.0020: unknown main item tag 0x0 [ 1348.193224][T17716] wacom 0003:056A:0031.0020: unknown main item tag 0x0 [ 1348.200335][T17716] wacom 0003:056A:0031.0020: unknown main item tag 0x0 [ 1348.207596][T17716] wacom 0003:056A:0031.0020: unknown main item tag 0x0 [ 1348.214794][T17716] wacom 0003:056A:0031.0020: unknown main item tag 0x0 [ 1348.221811][T17716] wacom 0003:056A:0031.0020: unknown main item tag 0x0 [ 1348.231299][T17716] wacom 0003:056A:0031.0020: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.4-1/input0 [ 1348.345269][T17716] usb 5-1: USB disconnect, device number 51 09:55:58 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x3fc, 0x0, 0x2, 0xfffffffd}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x3a8, 0x0) bind$tipc(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000003c0)='X', 0x1}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:55:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x28, r1, 0x311}, 0x234}}, 0x0) 09:55:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000c00", 0x20) 09:55:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x31, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:55:58 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 09:55:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) [ 1350.471434][T27559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1350.475689][T27556] irq bypass consumer (token 0000000007ec1dea) registration fails: -16 09:55:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) 09:55:58 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 09:55:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="31dd9638e37f", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 09:55:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) [ 1350.724411][T17716] usb 5-1: new high-speed USB device number 52 using dummy_hcd 09:55:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) 09:55:58 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) [ 1350.875012][T27608] irq bypass consumer (token 0000000007ec1dea) registration fails: -16 [ 1350.984225][T17716] usb 5-1: Using ep0 maxpacket: 8 [ 1351.123854][T17716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.135005][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1351.148184][T17716] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.40 [ 1351.157402][T17716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.177478][T17716] usb 5-1: config 0 descriptor?? [ 1351.660675][T17716] wacom 0003:056A:0031.0021: unknown main item tag 0x0 [ 1351.667915][T17716] wacom 0003:056A:0031.0021: unknown main item tag 0x0 [ 1351.675139][T17716] wacom 0003:056A:0031.0021: unknown main item tag 0x0 [ 1351.682318][T17716] wacom 0003:056A:0031.0021: unknown main item tag 0x0 [ 1351.689333][T17716] wacom 0003:056A:0031.0021: unknown main item tag 0x0 [ 1351.696481][T17716] wacom 0003:056A:0031.0021: unknown main item tag 0x0 [ 1351.705672][T17716] wacom 0003:056A:0031.0021: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.4-1/input0 [ 1351.863350][T20291] usb 5-1: USB disconnect, device number 52 09:56:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) 09:56:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x31, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:56:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) 09:56:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="31dd9638e37f", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 09:56:05 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x66) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 09:56:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) 09:56:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) [ 1357.848605][T27701] irq bypass consumer (token 0000000007ec1dea) registration fails: -16 [ 1357.885953][T27697] irq bypass consumer (token 00000000c64f2058) registration fails: -16 09:56:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="31dd9638e37f", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 09:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) 09:56:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) [ 1358.063555][T20291] usb 5-1: new high-speed USB device number 53 using dummy_hcd 09:56:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="31dd9638e37f", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) [ 1358.185655][T27715] irq bypass consumer (token 00000000276c8783) registration fails: -16 09:56:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) [ 1358.276646][T27718] irq bypass consumer (token 00000000f08da2fd) registration fails: -16 [ 1358.305768][T20291] usb 5-1: Using ep0 maxpacket: 8 09:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1010008b) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) [ 1358.423757][T20291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.434996][T20291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1358.448182][T20291] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.40 [ 1358.457585][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.580932][T20291] usb 5-1: config 0 descriptor?? [ 1359.070689][T20291] wacom 0003:056A:0031.0022: unknown main item tag 0x0 [ 1359.077982][T20291] wacom 0003:056A:0031.0022: unknown main item tag 0x0 [ 1359.085241][T20291] wacom 0003:056A:0031.0022: unknown main item tag 0x0 [ 1359.092462][T20291] wacom 0003:056A:0031.0022: unknown main item tag 0x0 [ 1359.099566][T20291] wacom 0003:056A:0031.0022: unknown main item tag 0x0 [ 1359.106899][T20291] wacom 0003:056A:0031.0022: unknown main item tag 0x0 [ 1359.115872][T20291] wacom 0003:056A:0031.0022: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.4-1/input0 [ 1359.272314][T20291] usb 5-1: USB disconnect, device number 53 09:56:13 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) dup2(r0, r1) 09:56:13 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009057ea2ca6d86644d90d5c30a00000000000003f0afdc0a5c1aa7f091e22771a776868238520ff38068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf13749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add48809faaf8606f4036a77ed0dd9c176a4385f895830e01b7a7f7c646eb507fbef7047e1d3fc6fe92a51a2fb09f6643068290ca5131379791bdf1b6a88e6eae524a39603d84608258e1f5132f1b2c62626161e749a2dacc4a07e0224776b16f00"/274], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000180)={0x7aad5e5e}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 09:56:13 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x66) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 09:56:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) 09:56:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) 09:56:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x31, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:56:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) 09:56:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) 09:56:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) 09:56:13 executing program 3: unshare(0x20600) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1365.432182][T17716] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1365.442760][T20291] usb 5-1: new high-speed USB device number 54 using dummy_hcd 09:56:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)) 09:56:13 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "e7b607b04bf357d2762136ab4f236218"}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 09:56:13 executing program 1: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) [ 1365.672323][T17716] usb 6-1: Using ep0 maxpacket: 16 [ 1365.704058][T20291] usb 5-1: Using ep0 maxpacket: 8 [ 1365.792981][T17716] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1365.801429][T17716] usb 6-1: config 0 has no interface number 0 [ 1365.807793][T17716] usb 6-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x7E, skipping [ 1365.818704][T17716] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1365.827961][T17716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.832436][T20291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.847516][T20291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1365.860559][T20291] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.40 [ 1365.869919][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.880614][T17716] usb 6-1: config 0 descriptor?? [ 1365.897872][T20291] usb 5-1: config 0 descriptor?? [ 1365.928304][T17716] gtco 6-1:0.219: Invalid number of endpoints [ 1365.935085][T17716] gtco: probe of 6-1:0.219 failed with error -22 [ 1366.174343][T25486] usb 6-1: USB disconnect, device number 20 [ 1366.392393][T20291] wacom 0003:056A:0031.0023: unknown main item tag 0x0 [ 1366.399514][T20291] wacom 0003:056A:0031.0023: unknown main item tag 0x0 [ 1366.406850][T20291] wacom 0003:056A:0031.0023: unknown main item tag 0x0 [ 1366.414092][T20291] wacom 0003:056A:0031.0023: unknown main item tag 0x0 [ 1366.421796][T20291] wacom 0003:056A:0031.0023: unknown main item tag 0x0 [ 1366.429238][T20291] wacom 0003:056A:0031.0023: unknown main item tag 0x0 [ 1366.438817][T20291] wacom 0003:056A:0031.0023: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.4-1/input0 [ 1366.594017][T20291] usb 5-1: USB disconnect, device number 54 [ 1366.942098][T25486] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1367.183311][T25486] usb 6-1: Using ep0 maxpacket: 16 [ 1367.302250][T25486] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1367.310617][T25486] usb 6-1: config 0 has no interface number 0 [ 1367.317006][T25486] usb 6-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x7E, skipping [ 1367.327854][T25486] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1367.337183][T25486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.346565][T25486] usb 6-1: config 0 descriptor?? [ 1367.386359][T25486] gtco 6-1:0.219: Invalid number of endpoints [ 1367.392920][T25486] gtco: probe of 6-1:0.219 failed with error -22 [ 1367.632837][T25486] usb 6-1: USB disconnect, device number 21 09:56:19 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x66) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 09:56:19 executing program 2: r0 = io_uring_setup(0x64, &(0x7f0000000040)) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) close(r0) 09:56:19 executing program 1: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) 09:56:19 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "e7b607b04bf357d2762136ab4f236218"}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 09:56:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x9004, 0x1) 09:56:19 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/274], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000180)={0x7aad5e5e}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 09:56:19 executing program 1: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) 09:56:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x9004, 0x1) 09:56:19 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "e7b607b04bf357d2762136ab4f236218"}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 09:56:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f00000000c0), 0x4) 09:56:19 executing program 1: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) 09:56:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x9004, 0x1) [ 1371.734203][T25486] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1371.985415][T25486] usb 6-1: Using ep0 maxpacket: 16 [ 1372.112271][T25486] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1372.120687][T25486] usb 6-1: config 0 has no interface number 0 [ 1372.127060][T25486] usb 6-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x7E, skipping [ 1372.138044][T25486] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1372.147251][T25486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.156705][T25486] usb 6-1: config 0 descriptor?? [ 1372.216400][T25486] gtco 6-1:0.219: Invalid number of endpoints [ 1372.222960][T25486] gtco: probe of 6-1:0.219 failed with error -22 [ 1372.474631][T25486] usb 6-1: USB disconnect, device number 22 09:56:25 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x66) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 09:56:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 09:56:25 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "e7b607b04bf357d2762136ab4f236218"}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 09:56:25 executing program 1: clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x10000000016, &(0x7f0000000200)) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x15, r0, 0x10, &(0x7f0000000040)) 09:56:25 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x9004, 0x1) 09:56:25 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009057ea2ca6d86644d90d5c30a00000000000003f0afdc0a5c1aa7f091e22771a776868238520ff38068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf13749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add48809faaf8606f4036a77ed0dd9c176a4385f895830e01b7a7f7c646eb507fbef7047e1d3fc6fe92a51a2fb09f6643068290ca5131379791bdf1b6a88e6eae524a39603d84608258e1f5132f1b2c62626161e749a2dacc4a07e0224776b16f00"/274], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000180)={0x7aad5e5e}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 09:56:25 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x0) setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.SMACK64MMAP\x00', &(0x7f0000000600)='TRUE', 0x4, 0x0) write$9p(r0, &(0x7f0000000c00)="dd", 0x1) 09:56:26 executing program 3: r0 = socket(0x2000000000000010, 0x3, 0x0) write(r0, &(0x7f0000000300)="2400000052001f0014f9f407000904000a00071004000100040000000800000000ccecbf", 0x24) 09:56:26 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f511080001", 0x17) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:56:26 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x80000000004e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 09:56:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1b", 0x1, 0x4008020, 0x0, 0x0) close(r0) [ 1378.042507][T25486] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1378.133148][T28058] net_ratelimit: 8 callbacks suppressed [ 1378.133180][T28058] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1378.153862][T28061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000004200)=@newlink={0x128, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x100, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xf0, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[], [], @loopback}}, @gre_common_policy=[@IFLA_GRE_TOS={0x8, 0x9, 0x7}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_TTL={0x8, 0x8, 0x111b}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x6}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0xffffffff}, @IFLA_GRE_LINK={0x8}], @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="84f8dcf967e0633c21d002f3cb83a497"}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x5}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0xff}], @gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]]}}}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x128}}, 0x0) [ 1378.282198][T25486] usb 6-1: Using ep0 maxpacket: 16 [ 1378.329867][T28166] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 1378.338588][T28166] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1378.347105][T28166] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1378.355464][T28166] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 1378.363939][T28166] netlink: 'syz-executor.2': attribute type 17 has an invalid length. 09:56:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$link(0x8, 0x0, 0xfffffffffffffff8) [ 1378.372401][T28166] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 1378.422528][T25486] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1378.430832][T25486] usb 6-1: config 0 has no interface number 0 [ 1378.437292][T25486] usb 6-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x7E, skipping [ 1378.448262][T25486] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1378.457573][T25486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.467717][T25486] usb 6-1: config 0 descriptor?? [ 1378.516413][T25486] gtco 6-1:0.219: Invalid number of endpoints [ 1378.523062][T25486] gtco: probe of 6-1:0.219 failed with error -22 [ 1378.528020][T28166] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 1378.537961][T28166] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1378.546255][T28166] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1378.554569][T28166] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 1378.771662][T17716] usb 6-1: USB disconnect, device number 23 09:56:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffdfffffffffff9, 0x0, 0xffffffffffffffcf) 09:56:30 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/274], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000180)={0x7aad5e5e}, 0x0, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 09:56:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000108}]}) 09:56:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 09:56:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x40003, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 09:56:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3f) 09:56:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 09:56:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 09:56:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000006f0200000000000200000000006b"]) [ 1382.292363][T25486] usb 6-1: new high-speed USB device number 24 using dummy_hcd 09:56:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x0) read$eventfd(r0, 0x0, 0x0) 09:56:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000006f0200000000000200000000006b"]) [ 1382.532247][T25486] usb 6-1: Using ep0 maxpacket: 16 09:56:30 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 1382.652686][T25486] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1382.660978][T25486] usb 6-1: config 0 has no interface number 0 [ 1382.667348][T25486] usb 6-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x7E, skipping [ 1382.678336][T25486] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1382.687603][T25486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:56:30 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00007fe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xc377fdf061a39fde) [ 1382.718368][T25486] usb 6-1: config 0 descriptor?? [ 1382.766968][T25486] gtco 6-1:0.219: Invalid number of endpoints [ 1382.773847][T25486] gtco: probe of 6-1:0.219 failed with error -22 [ 1383.019060][T25486] usb 6-1: USB disconnect, device number 24 09:56:31 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) r3 = epoll_create1(0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x9f93e6d68f21622f}) 09:56:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000006f0200000000000200000000006b"]) 09:56:31 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:56:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000e2ffffffff00170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000008a, 0x0) 09:56:37 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40084146, 0x400000) 09:56:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 09:56:37 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) 09:56:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000006f0200000000000200000000006b"]) 09:56:37 executing program 1: syz_emit_ethernet(0x67, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "76608c", 0x31, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x140, 0x80ffffff, 0x28, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @remote, [], 'E'}}}}}}}, 0x0) 09:56:37 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) r3 = epoll_create1(0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x9f93e6d68f21622f}) 09:56:37 executing program 1: syz_emit_ethernet(0xfebc, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x8, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 09:56:37 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffe0, 0x0, @tick, {}, {}, @quote}], 0xff33) 09:56:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffffff3b, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 09:56:37 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x70c1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f000039c000/0x1000)=nil, 0x1000, 0x0, 0x80000000011, r1, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x21) 09:56:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup(0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 09:56:37 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) r3 = epoll_create1(0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x9f93e6d68f21622f}) 09:56:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) 09:56:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xa}) 09:56:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x401, 0x0, 0x0, {0xa, 0xfe80}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 09:56:43 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) r3 = epoll_create1(0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x9f93e6d68f21622f}) 09:56:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) 09:56:43 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) [ 1395.456869][T28706] validate_nla: 2 callbacks suppressed [ 1395.456892][T28706] netlink: 'syz-executor.2': attribute type 22 has an invalid length. [ 1395.471420][T28706] (unnamed net_device) (uninitialized): option ad_select: invalid value (3) 09:56:43 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 09:56:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r8 = dup2(r7, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r8}}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 09:56:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r3, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) 09:56:43 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:43 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 09:56:44 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r8 = dup2(r7, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r8}}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 09:56:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000004980)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10c) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x310b110ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:56:50 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 09:56:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r3, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) 09:56:50 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r8 = dup2(r7, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r8}}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 09:56:50 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:50 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:50 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r3, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) 09:56:51 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 09:56:51 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112112, r0, 0x0) 09:56:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="000100000000000095e4c0cedcaf347c", 0x10) getsockopt$inet_tcp_int(r1, 0x6, 0x21, &(0x7f0000bfcffc), &(0x7f00000002c0)=0x4) 09:56:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r3, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) 09:56:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xe9) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2c}]}, 0x1e4) 09:56:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000012000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e0f058fc9b001e5baf80c66b8b542e78466efbafc0cb0aeee360f08f30faee4652e0f01cff30fc77516baf80c66b8be4c688566efbafc0cb83900ef0f78ed6766c7442400003000006766c7442402880000006766c744240600000000670f011c24", 0x62}], 0x1, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x23, 0x0, 0x9) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r3}}, 0x18) 09:56:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r8 = dup2(r7, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r8}}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 09:56:58 executing program 1: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) 09:56:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffc7}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010020105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f48d00000000000000de3d0000001700"/128], 0x80}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 09:56:58 executing program 3: fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) 09:56:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x1, 0x2e2) init_module(&(0x7f00000000c0)='+}\x00', 0x3, 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x52}) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r1, &(0x7f0000000080), 0x101b2}]) 09:56:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffc7}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010020105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f48d00000000000000de3d0000001700"/128], 0x80}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 09:56:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffde, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000320001830000000066f3069a08f815741400010010000100080001c73acfb6782c06392a5a4625184a38758b14a85760801c76f00677c58b8c13f6d7684461361deab88b98a0aa4136fcfc750bdabda0380268b3aeff4a4100"/104], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x80) sendmmsg$alg(r1, &(0x7f0000000180), 0x492492492492785, 0x0) 09:56:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x300}) io_submit(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="36bedc8471a59a1d9e277a4dbab5d0da8303bf126f0f338b8ca2072e97252250d29dcbb2ebd5d76d709a1ebe54697c0496b3802fbfac366d677dc01e90ad07f83cb2123a594abbec9b25ecce9cc8f29a57849eb6d951021986b4338898e685e1d1ea507bfc96501c4de700065284aceb3bbcc8fd2cd3157fa11c63d6870e8b042f07c4ed6f09243a5057ffde07ade5a4e85d6935b8bc4f09a210c8ecf3e6cd700a", 0xa1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001440)="ce", 0x1}]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1410.408740][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1410.419021][T29024] tc_dump_action: action bad kind 09:56:58 executing program 1: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) 09:56:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffc7}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010020105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f48d00000000000000de3d0000001700"/128], 0x80}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) [ 1411.001780][T29040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1411.011288][T29040] tc_dump_action: action bad kind 09:57:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@setlink={0x3c, 0x13, 0x321, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x0, 0x3, 'lo\x00'}]}, 0x3c}}, 0x0) 09:57:05 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x200}) 09:57:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffc7}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010020105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f48d00000000000000de3d0000001700"/128], 0x80}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 09:57:05 executing program 1: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) 09:57:05 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000002140)) 09:57:05 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 09:57:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8c00}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 09:57:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 09:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000910000400000000020"]) 09:57:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "5c980eb54662ac76bf4930758a156da65b1e818dc655549f79e1a3396ff40013"}) 09:57:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000180)='\x00\x00\x00\x03\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') 09:57:05 executing program 1: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) 09:57:11 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'teql0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="410000b899000000b30101bedbc10027c634b30e5116ce73cba2ffdced000000000500050000000600000000a11ac8b67f"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x208) 09:57:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="4bf910bcaf37cf206fd743da7b13aa594d631b99d1233142974136ecc5cfb94fbfb71c82e7cee1c615d36fa2ff3f226899d3170deeacbd3e10a740bc173dc781a4777141f7445b23028bdc1f34860e914e8957cc6846ffc61106f8e2c2964b5381c9c7d948df7c6c46177ec5327aae764e7f70d27d6e29021ba44d3feea7ba3cb88f68ddada477384f8384d26a05360bb3", 0x91, 0x0, 0x0, 0x0) 09:57:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 09:57:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x0, 0x4}, 0xc) 09:57:11 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000000)=""/73, 0x49) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 09:57:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e4", 0x13}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1423.452356][T29283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:11 executing program 3: mbind(&(0x7f000069b000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f000069c000/0x8000)=nil, 0x8000) 09:57:11 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'gre0\x00\x00\x00\x00\x04\x00'}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'bcsf0\x00'}, 0x18) 09:57:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) [ 1423.746823][T29310] IPVS: stopping backup sync thread 29311 ... [ 1423.796058][T29332] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0 09:57:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@initdev}}, 0xe8) dup2(r0, r2) 09:57:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="01003a0c0b10"}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r2, 0xffffffffffffffa3, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 09:57:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 09:57:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564b, &(0x7f0000000280)) 09:57:18 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000010000/0x4000)=nil, 0xd07000}, 0x1}) 09:57:18 executing program 5: syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb2, 0x9f, 0xbf, 0x8, 0xe8d, 0x4, 0x64a4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@acm={0x4}, @acm={0x4, 0x24, 0x2, 0x12}]}]}}]}}]}}, 0x0) 09:57:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c1400000000ffffa888000004001300", 0x20) 09:57:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) 09:57:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000200000a1f000007042808000800084004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:57:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000009700)={&(0x7f00000081c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000009600)=[@dstopts_2292={{0x18}}, @rthdr={{0x18, 0x29, 0x3}}], 0x30}, 0x0) 09:57:18 executing program 3: munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = msgget(0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) msgsnd(0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockname(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) msgget(0xffffffffffffffff, 0x0) clock_getres(0x0, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getuid() geteuid() msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001b00)={0x3}, 0x8, 0x0) [ 1430.775668][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:57:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffffff0000e0000000500100008801000073747000000000000000000000000000000000000000000000000000000000004800000000000000020000000200006e8700ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffffff00004e234e21040071ac0600ff7f382803000500070000080100736e6174000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000001000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ff3400000000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f74756e000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000000000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000010000000000000007000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608) [ 1430.970346][T29476] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING 09:57:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x808, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000002180)=""/4096}, 0x18) [ 1431.022484][T20291] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1431.033038][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:57:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = semget$private(0x0, 0x2000000010a, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) 09:57:19 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, 0x0, 0x0, 0x0) 09:57:19 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x38, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 1431.264140][T20291] usb 6-1: Using ep0 maxpacket: 8 [ 1431.387597][T20291] usb 6-1: config 0 has an invalid interface number: 236 but max is 0 [ 1431.396096][T20291] usb 6-1: config 0 has no interface number 0 [ 1431.402563][T20291] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=64.a4 [ 1431.411717][T20291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.433834][T20291] usb 6-1: config 0 descriptor?? [ 1431.712778][T20291] usb 6-1: string descriptor 0 read error: -71 [ 1431.733466][T20291] usb 6-1: USB disconnect, device number 25 [ 1432.442170][T27495] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1432.682084][T27495] usb 6-1: Using ep0 maxpacket: 8 [ 1432.802330][T27495] usb 6-1: config 0 has an invalid interface number: 236 but max is 0 [ 1432.810716][T27495] usb 6-1: config 0 has no interface number 0 [ 1432.817229][T27495] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=64.a4 [ 1432.826480][T27495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.836256][T27495] usb 6-1: config 0 descriptor?? [ 1433.112513][T27495] usb 6-1: string descriptor 0 read error: -71 [ 1433.121386][T27495] usb 6-1: USB disconnect, device number 26 09:57:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r2, 0x0) 09:57:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) r1 = dup2(r0, r0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000044a6aeabec2e15fc1772f184bc1b3f1000ff034017db9820000000003b08d450ffffb3560000080000ab31c357e3972f415ff5cb88b9ce837c597e9ce5cccf7942003606004079025f759e9f5d54076bb47f57f3"], 0x58) r2 = dup2(r0, r1) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="770200007d000000006400"/42], 0x2a) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 09:57:25 executing program 1: unshare(0x20400) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) tee(r0, 0xffffffffffffffff, 0x8, 0x0) 09:57:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:57:25 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0xf4, 0x30, 0x20, 0xe20, 0x101, 0x1773, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa9, 0x68, 0x62, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 09:57:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) set_mempolicy(0x8001, &(0x7f0000000200)=0x80000003, 0x3f) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 09:57:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200080000000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 09:57:26 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r3 = memfd_create(&(0x7f000003e000)='\'', 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x80000001}}) [ 1438.082721][T29601] kvm [29600]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x187 data 0x4000 09:57:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x4, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) [ 1438.212082][T20291] usb 5-1: new high-speed USB device number 55 using dummy_hcd 09:57:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}, 0x0, 0x0, 0xff, 0x1}, 0x20) 09:57:26 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [{[@empty]}, {[@empty]}]}, @ssrr={0x89, 0x3}]}}, @gre}}}}, 0x0) 09:57:26 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xa1, 0x26, 0x8, 0x451, 0x5053, 0xe661, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa3, 0x47, 0xf6, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a}}]}}]}}]}}, 0x0) [ 1438.452329][T20291] usb 5-1: Using ep0 maxpacket: 32 09:57:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10024, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xc0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) [ 1438.573050][T20291] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 1438.582453][T20291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.599994][T20291] usb 5-1: config 0 descriptor?? [ 1438.649580][T20291] pegasus_notetaker: probe of 5-1:0.0 failed with error -12 [ 1438.842236][T20291] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1438.853978][T25488] usb 5-1: USB disconnect, device number 55 [ 1439.082144][T20291] usb 3-1: Using ep0 maxpacket: 8 [ 1439.202304][T20291] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1439.212200][T20291] usb 3-1: New USB device found, idVendor=0451, idProduct=5053, bcdDevice=e6.61 [ 1439.221324][T20291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.265455][T20291] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected [ 1439.465000][T17716] usb 3-1: USB disconnect, device number 46 [ 1439.632080][T27495] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1439.872123][T27495] usb 5-1: Using ep0 maxpacket: 32 [ 1439.992570][T27495] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 1440.001698][T27495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.011461][T27495] usb 5-1: config 0 descriptor?? [ 1440.056164][T27495] pegasus_notetaker: probe of 5-1:0.0 failed with error -12 [ 1440.232298][T17716] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1440.254023][T27495] usb 5-1: USB disconnect, device number 56 [ 1440.482192][T17716] usb 3-1: Using ep0 maxpacket: 8 [ 1440.602298][T17716] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1440.612299][T17716] usb 3-1: New USB device found, idVendor=0451, idProduct=5053, bcdDevice=e6.61 [ 1440.621546][T17716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.665603][T17716] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected [ 1440.863866][T17716] usb 3-1: USB disconnect, device number 47 09:57:31 executing program 0: r0 = socket$kcm(0x10, 0x240000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0001410100000000000019f000000003000000000000000000", 0x2e}], 0x1}, 0x0) 09:57:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:57:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:57:31 executing program 5: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x82000004148, 0x0) 09:57:31 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) 09:57:31 executing program 2: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8041, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 1443.123333][T29746] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1443.150745][T29746] debugfs: Directory '29746-4' with parent 'kvm' already present! 09:57:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000005440)={&(0x7f0000003dc0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000053c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x3b}}], 0x30}, 0x0) 09:57:31 executing program 5: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf055d90f15a36a15aa543cb844bb8b14bb772509", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000540)=""/14, 0xe}], 0x6}}], 0x1, 0x0, 0x0) 09:57:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005fad25a80648c6356c10324fc00120000000a000a00053582c1b0acea8b0900098004021700d1bd", 0x2e}], 0x1}, 0x0) 09:57:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1443.404243][T29771] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 09:57:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) 09:57:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xbf, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000040)={[{}, {0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000003}]}) [ 1443.468096][T29774] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1443.842483][T20291] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1444.082139][T20291] usb 3-1: Using ep0 maxpacket: 8 [ 1444.202315][T20291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.213515][T20291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1444.226529][T20291] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1444.235794][T20291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.245554][T20291] usb 3-1: config 0 descriptor?? [ 1444.724243][T20291] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 1444.737851][T20291] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input100 [ 1444.824163][T20291] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1444.935107][T20291] usb 3-1: USB disconnect, device number 48 [ 1445.702226][T20291] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1445.942173][T20291] usb 3-1: Using ep0 maxpacket: 8 [ 1446.062274][T20291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.073470][T20291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1446.086482][T20291] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1446.095746][T20291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.105284][T20291] usb 3-1: config 0 descriptor?? [ 1446.404257][T20291] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 1446.418175][T20291] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0025/input/input101 [ 1446.503919][T20291] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1446.577826][T17716] usb 3-1: USB disconnect, device number 49 09:57:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="24000000020807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 09:57:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) read(r1, &(0x7f00000000c0)=""/117, 0xae3) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa3c) 09:57:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:57:39 executing program 5: syz_emit_ethernet(0x12, &(0x7f00000000c0)={@remote, @broadcast, [{}], {@generic={0x8035}}}, &(0x7f0000000180)) 09:57:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:57:39 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r4 = gettid() tkill(r4, 0x10010000000032) 09:57:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) read(r1, &(0x7f00000000c0)=""/117, 0xae3) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa3c) [ 1451.516787][T29808] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 09:57:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x13c}}, 0x0) 09:57:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1451.684798][T29819] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 1451.693570][T29819] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 09:57:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) read(r1, &(0x7f00000000c0)=""/117, 0xae3) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa3c) 09:57:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x1000003) 09:57:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) read(r1, &(0x7f00000000c0)=""/117, 0xae3) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa3c) 09:57:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xfc) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) 09:57:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:57:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000b80)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000240)=0x41064) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00!', 0x2}], 0x1, 0x0) 09:57:45 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) pipe2(&(0x7f0000000080), 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendto(0xffffffffffffffff, &(0x7f0000000540)="7ddc", 0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfb]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000780)={0x0, 0x0, 0x4, 'queue0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:57:45 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r4 = gettid() tkill(r4, 0x10010000000032) 09:57:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:57:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) 09:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x484}]}) 09:57:46 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8b, 0x33, 0xea, 0x8, 0x3eb, 0x2, 0x4a2d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x1, 0x72, 0x77, 0x55, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "f019fc8240ebae4a481118b83e441e0fd752efd57fe546aedba5d82cc184a3fe"}) 09:57:46 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x0, &(0x7f0000924000/0x4000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) mincore(&(0x7f0000ff4000/0x9000)=nil, 0x20ffd000, &(0x7f0000000100)=""/253) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) [ 1458.252509][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.258867][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:57:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@sndrcv={0x12, 0x84, 0x6}], 0x30}], 0x1, 0x0) [ 1458.332660][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.338860][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.345293][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.351424][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.357788][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.363960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.370265][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.376731][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:57:46 executing program 4: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) [ 1458.577381][T20291] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1458.822635][T20291] usb 4-1: Using ep0 maxpacket: 8 [ 1458.952385][T20291] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1458.960770][T20291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.971133][T20291] usb 4-1: config 0 has no interface number 0 [ 1458.977565][T20291] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1458.986826][T20291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.021205][T20291] usb 4-1: config 0 descriptor?? [ 1459.067104][T20291] Registered IR keymap rc-hauppauge [ 1459.074665][T20291] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0 [ 1459.086945][T20291] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0/input102 [ 1459.268428][T20291] usb 4-1: USB disconnect, device number 52 [ 1460.082086][T20291] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1460.322056][T20291] usb 4-1: Using ep0 maxpacket: 8 [ 1460.442278][T20291] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1460.450514][T20291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.460895][T20291] usb 4-1: config 0 has no interface number 0 [ 1460.467144][T20291] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1460.476377][T20291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.485830][T20291] usb 4-1: config 0 descriptor?? [ 1460.526302][T20291] Registered IR keymap rc-hauppauge [ 1460.533400][T20291] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0 [ 1460.545747][T20291] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0/input103 [ 1460.863523][T17716] usb 4-1: USB disconnect, device number 53 09:57:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:57:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x2000002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 09:57:53 executing program 4: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) 09:57:53 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r4 = gettid() tkill(r4, 0x10010000000032) 09:57:53 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) accept$packet(r0, &(0x7f0000003d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003dc0)=0x14) r1 = socket(0x100000800000011, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000040)=0x20004, 0x92da) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8140}, 0x0) 09:57:53 executing program 5: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) 09:57:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="090000000000363940d3c7a3ba27660199783b0a82f79b3207b4bcfa7790ac47a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60633a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c5b2cb0c26bd0254072ba9bf0fc3d7b21d53478e382dcf296a23a060bfe5519de6c998ed4984eee3b3e9f030065b32c5428b09815f36dec66a130a0956915cdbd3ff71bb14c87b3a8a728a8ac0a0cbd9e86", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:57:53 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:57:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000180)={0x1, 0x0, 0x10000001000, 0x0, [0xfffffffe]}) 09:57:54 executing program 4: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) 09:57:54 executing program 5: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) 09:57:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:57:54 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r4 = gettid() tkill(r4, 0x10010000000032) [ 1466.572712][ C1] net_ratelimit: 2 callbacks suppressed [ 1466.572736][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.584912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.652710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.659075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.665791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.672141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.678564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.684922][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.691339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.697697][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:58:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:58:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 09:58:00 executing program 4: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) 09:58:00 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x121002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040), 0xa) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f0000000240), 0x8) 09:58:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x10]}) 09:58:00 executing program 5: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8ec48d59161301000000000000002ef6b3490d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc98b1cd7b1d36935ab852cbe47ed998413076b2"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000072, 0x0, 0x0) 09:58:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="7d9a55198641", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {}, {}, {0x0, 0x21}}}}}}, 0x0) 09:58:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:58:00 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000000c0)=0x80000000) 09:58:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4003) [ 1472.812565][ C1] net_ratelimit: 2 callbacks suppressed [ 1472.812588][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.824675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.902806][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.909218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.916040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.922497][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.929117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.935599][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.942432][ C0] protocol 88fb is buggy, dev hsr_slave_0 09:58:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="f3", 0x1}, {&(0x7f00000005c0)='5', 0x1}, {0x0, 0xfffffe8d}, {&(0x7f0000000300)="9e", 0x1}], 0x4) [ 1472.948814][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:58:01 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x1, 0x1) 09:58:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite\x00') mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r0, &(0x7f0000000080)=0x1000000000000000, r1, 0x0, 0x1000000007ff, 0x0) 09:58:07 executing program 4: statx(0xffffffffffffffff, 0x0, 0x2c00, 0x0, 0x0) 09:58:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 09:58:07 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/15) semop(0x0, &(0x7f0000000040)=[{}, {}], 0x90) semctl$SETALL(0x0, 0x0, 0x10, 0x0) 09:58:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x1) 09:58:07 executing program 0: r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) close(r0) 09:58:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 09:58:07 executing program 4: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000be000000002000bc379650228cd79e530000000000000040", @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="0000000001000400"/28, @ANYRES32, @ANYBLOB='\x00'/23, @ANYRES32]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:58:07 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/15) semop(0x0, &(0x7f0000000040)=[{}, {}], 0x90) semctl$SETALL(0x0, 0x0, 0x10, 0x0) 09:58:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000000)=@caif=@util={0x25, "714a2d667b190f7ba533faf4bf0a866a"}, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="50faee72fabca773fcbb988358538795137366c5d577bcdc8b039070ec812fb06a8c7f8953a66cc43e9d364429ea3ef36cf20662ebf075a72f5939c0c1dbb2b9ccbb7c0f4e82f31cdc21ea54148e4cc9f24ad3b565aacd01b0e0e5f7e4d94d42579e0b9aed8ad6ace43a2ae7776d21008068edb3033734a5478b0881051e687230f534aedc2d0eef04ff46e77cd93fd00c803f7b86f723d4fc4fadb052a251d993aebb0ac8620f3e6d6a3f4feeebf63d414a28c64d674a734f5204df1cad1edafee6f5c4e437bb5a9e70fe39b7500ea1da9af39a219db45f"}, {&(0x7f00000019c0)="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"}, {&(0x7f0000000080)="882e9d20321ff2cab10657735c9bf74087015cdb3895ade178c576a5181c736c516f41d36d9cc6dfc27785beac2c9d79b024c5275de71924be289c9f132789995eb24b7b892c847abc8ca0cbc3b96cbbc1559f68751005c48de11bf3d50d83eb16dfc8fefb76baeb62a08c53c25d2a9398cfe8"}], 0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, "2371972809ed26fb4a69c857b4472d2bb5d7018aadf8"}, {}, {0x0, 0x0, 0x0, "a31e2223c22c98280547e75be308c6965997bef42bfc88599c69f28d36fbd35ea7fee66891eebe1a6a5800424dbc56ad0e89fc413f8e054228a2bca8a1701633f5136fb24e305193b568d3efd8b26ed16a3dec96"}, {0x0, 0x0, 0x0, "0391b42e5f45a5e4bd9c6481c98c9f624c64251e550473d4a37a16ef5a24cfb7a670d0f8a745210a2b9bc948a046e0ab6c04b83c73f8a5ccfe30a3c347678fb3"}, {0x0, 0x0, 0x0, "334089b61b0013100cd9eba9563130c33cc9524dae4019f14e7af239499ca9e88acbeeb16899be4590344b040bdae11678f3cdd8f5d260d24ab99dcf051f5fcd1faa1bb1a5c49a0723db9445c725b98fe23c90"}, {0x0, 0x0, 0x0, "2d664ec642c6"}, {0x0, 0x0, 0x0, "6b510b102a34dbb84c200ab58fc2ca46f371c3a09f223015fdcb27a1eded747da7e1c45b5aa4e88752c9eae534e90cc3199d28d26a3414a5321f0c4cadd3157bfa4174a6313e0934e15a57b1683980576ca6c474fce08961d8fb260bb5fd65e2c9fd8da451297b178565016cb97c29d7abb3d91c3e1c7dd0270185647e830d7aa97209effc381f2632cd82e35a40865f40e47a87817eaa20a8eb1a84968bf355901cc14bc8e18cd5827f04c6ca9e82327d9cc0e9751fdb68d4399f65e6155a0d50f24b9881bd7d6e2dd35f2c94"}, {0x0, 0x0, 0x0, "5eeb85608971da2022be1290c2ab8827e93ecf6a524b11cf6eab3a8c"}, {0x0, 0x0, 0x0, "fd4f383eeaedc5fb72945a2461269c3ce9e38ec3a339342102b39789d20c440af872a948c52b4d1a3b1eb002e09ea84244b19e0691c91844b6cf758e13c8aade31c6d00e7d00bfd833c755e239e5d6d95c6255257c6cc898a0f2d5855339c1d5e949f9ddbf475a878847418c14cad068bde20c4a4afbfe370514c7a59071fba5cc9454544a3272119040da50b6b61239754e994bbc5ecda35c12c8fb8442ef"}]}}, {{&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="ff4133ef751f1cbb24972c07ab2a87f2d86a45b4728ca16c7890e5f0d410195aa99182dea2ad96d3f7058676bae125792b2ac41703102bff0afd949d941cd324abf4c50e61ab752e90d5bb9501d4e8259c830e4d99c0f8e9cdb39fa6ab6e75df1c0db7906aeb00a1d7a932562fbd9965fe423c152fb6bc8496030b7edb9f829ca931d963b413234f0d5f3270f6d06477"}, {&(0x7f0000000740)="8a7fd5d592725ea4c88774d61a0119f6102cf8089610f6ae6488630862745a13a344ae6e664fb04880e5c0fc8a"}, {&(0x7f0000000780)="08c95a0d"}, {&(0x7f00000007c0)="786f84536fe27a023e4d109fa768a5eee48689ceffacd97a7dbfbe69bc27be7f471743b04d26fd8acc8d34b7c2407cfa670284b66a7a63bec247206c7d86dd9a14750cd4a6f946fca715b972acc10d4d13448c102cf3ac55941c602566beaa940db617d6967ed92d9ffc8814b786cf2f24ada8876409d36bb12357e78ab38189a7b4467f3758bb36e81b9e7d6dc1f67262901880d8aeef3a0641ca3580e15eec8e087ae40ddbc63267c5e05c3799229526a084031cc5fa728306d99f0dc0fee3206a6960000b0e8352fb21c7a3e5fa96861baec53bb7c2396a9b35ba626e40ca8f20"}], 0x0, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, "20f9e38769881196fc86d272129f83d24a337c4acf97581ffc7a72a3d2c5c9fdb48e34555081224583ffaea53931bd339a56fe5d12758358af858e7739277e577adf9993860cd46329f08adc3fad459308f5593bbdb32493ab911a493cce38229cbd4e61bbc3176565f8c6bdf6bc0c84195854b6bc64a8fa60b1b579b0f11da59ef6f2264d34eb67154b215f73e49dd280bf7183e94bc31f77dc69c9453e94bc80353410369aee265d3abb39915923790dbb9f73b11934ef78ce6ba1f97244dd6319943fb76c48100a7277302e9ea80be082aa7c48f0bf898616059e18be9281b5873d85ab00d391b4a796f534bbb52b88f0"}, {0x0, 0x0, 0x0, "e0713a8f79fd1248a19823df60060e9cb52c21dd924985acc526c6b342570815aa02"}, {0x0, 0x0, 0x0, "b031f83af385f2ac7deaaeadc459d4401897d686bb0f2c195f2c6b9484a88e258730d5e2e0dde8fb07e11f77a8d75ff02bf0f5c578c8f2e450d2b82c5d069eb4c61e47a8a7f02c31dbbe02647504a02e62e5a0930ee857008f36e267b9c96edc37303834e94f431824d701799bcc0e62dc6e4ca056372aebe6a70d0a3fe459f0a7df520ac954db2e57334104e0d0e77c46de6c68061ee7931f07ad51509d35294c8d80faf539af1219e50b45991f29fe005dc355b368e6b350b4a1e3e16ea1b81fa1"}, {0x0, 0x0, 0x0, "30321558eca71d464309c945db1140135038dc0f021cb1e9eb1f9d54c344b066798017fa28a4c255b025fa5744f730cbff65c10355eb36156c0eebc22676546cdd9bb383bd47b814e8b9c0a96fb65449e37ebb4381e226f68ad805660367e55ff4eadf81a85d22f5dcc365528318771cfe7b4a7190afc240f9f413c27ba8f2b4a6d0aa717a901cfb37db457cb2fd03866424aad95f20183be90d466a75128e92ec4841a803b687b31383e2c924f83b2a6925a84d0f21015495b073e79f0a3bb99c592d96bfdf01efc717b597f16e98a6fca68dde39536385c15bd4a4f8c7010d030516e61a69321ef0e760fc4704"}, {0x0, 0x0, 0x0, "ebd0fe14d318c04a38e6f6b45ee67cfc45f5302f094529eb6ba7b110212b01e37c7a5f10"}, {0x0, 0x0, 0x0, "027f5e54c00c55bad8f1b04598d1b0a3d75aa242"}, {0x0, 0x0, 0x0, "9ca99397c2fa0809137491e83e727241057fa497e4413c58a51122eb656153618503d617afa400083f54f0ee1d5e8944d36e0deaff483e3dd041d252873bb1702bb00d06c3ec64c7c444925ba373ca0f802988c36760abc7df3865c27136a7d34b1526a596e1a7133b7b6dc9d8d9996891fb7feaab4470e301c816d43d04e77a1d8895c3ba573798bf3a0ef4b50688a9dff3499056f4d20eab9cd5f0c3dae6716d185b64dbdb2ebbd771e14e16539e1c6e340084d4487de8ed9e1d5b0a2f3e877b3f10d1770c1e13fc1a3bdfc649be283a582a9c287233ea151168b2851d78274ae9769c820c61515618e526630241ee4db1927739cc51eed902efb0a35b27630cbe0df2f6e9e7622584bd227b272f34205b40d47aabe8383b29cc7d8f5cb9b64acec57fa925558c9082202507164a3f8022579a5c5f0b7988564e1993e0b33a69cec651e22f143ea39144273ebd501d7f1672347d1858416278c84fa25c88b3c840d3f879bbaa8e469b7be6a5982c31ac507c290d7b419bfd1afc1626fbcf752cf64e020222616e5e4c3aa684ff45e16f304a116cad0cde686aac8984d102bf842570fb8e597a363255753511dc15cf7fb382d177696e1b031819e5049e06b19f51fe257d0f72e70e96eb2c7d0c84d337ee27afdcb2c5ba6c2ab0fabfc838853ff0f01c0ac1192f91a3efa105e9a339821f8d6f63841a65566cfe0090962032d5aeaed97c86ede2aa589ed24ed49f3c88f78e0c07ca02a7ad5d6ab3d6da0eac306550700383f11224a7d07d8db088bb99c749248faade38486b58a26c002a4cbfde7718a6b119e46a399be7eb43838b940b100e5464e6f643a66b0610aba9edc712ad352e85216cb5f36106c2159d8d326cd8b739b613509f6886e147f8f9b23483672bce0d8380efee091974b03fa3e439e14d4b416031af309ec1e2357071917c360efdd074d122fbc54ffc4fe182e90de8d75c3921596f9717e76bb8b060e5a55919b31e7da99671e1f2be9d0697ad1e3ba969edf374af246b29316586a15ccdb1e206134b85f57b1f66004771187988814610ddcfc4cc6694b37cec5b1152de83684a923ff1d638bb15532eb28f67d5328322f96edb81c8b4a9018c5b1b7c98c9061825ddffc1e83d31fd940249045a0278e3366e07238c5a569b06d8d2a41063cb30f1fb34502e92bba4aeef78fe5156b0e4f7a0f2e65ae93f4312a78f4aa1fe07f83cc60c7a00c9e62e40dfc94807e627e017be5d958171f1637bcbe85cf7ec81dc8e43a4d2c08d8df7923879d58c1dc38ad9870bd63e079cfa28eaa971ab8ac37c5f8003c2f458dd7f3253ef8704b0b4275612d74aea4b68ac8502a9c3bc05629206c867f4eb7ebc7f97ea5cb161cf6794f4b97bc4928708ed8d13328dfb213ecbca5c51c0eacbef297746f5d2a6de1e8f13f1b4efa204a4380207f63de98410a08a14021a429ba58f91bbdac5d5b0fad2b8ae430af01dbfb35ae052e065fbb09394e17c716cf431b585609309a448a6b9dee04a2a72e2fcf9361a4239f5770d3afc66ffaa132d603f3f405bf1327fc74f4a5652a14e2e2252c5e1c526ad2bd337d2da4a4b852c3813e34f2f87d8ae05d2fbe3736ae5b49fc13cec102e9878e9abd229e20565ffffa2eb3665afa51b7b2bbac68b102a63f98e22dff7584ca4c375a4bdf2447226f3df7db37fb582badf286256c3a92dfb6888281f1b023539de3a49c2c7caabf10d7d491235169b733f18a65667cf7bccc6b5784a1edf188d9e751775a969cdacfbb92d30f76c6e486d802cfb0c825fabad2599e8d77209b4dcee03e414afb5f101f31985f00425c0e04ac1e4849a3129065e3ff2a1801fee6319506244b4ebe2db5db9f18e711c0e649d860991a1dd9626973c27bc60bb864fb90463d6c549d9e3446b4e93cbbb3b87ea0ac032653fc6aa4c9b51923a759aca5a8f3c2c8a5c6382510455489a59314ecca5ae5b12ff2e2ec56efecbc851dec62baffaa55ca716b134c385f16b31115b2019d94c6f5fbc9a057abedb7613714c6c27ef17baa2e608a77d9bde49affd89bb1597a44d2eb26a05860dfe21b489b21bee6ed1c472142aa868f16823e95d1af5f8a657493c9c558949316e2c021c50ce5c4b29275c09c458eef21faafddc1877fd234be7716aa723a4d7a2a2f632c5cd002fbe00db3c2ae0798970db22bddb3201db2efffa1d9e86f6c248ad098853e71228d86f18eea89e489ca3024f878258d2cb26d73cf4d06971ec7f89935ada2ff9d8ca7b6cccbf9edd31fa623fd91562abb85378caed11e64b628b7c4fcbdb11ff0cdb7401e5553b08751668ea706d8308d2461ca81c17dd315736ad9609c4e2ae2120c80730e4b42502086f10f798a50cfa24183ea310e84f06bfe6e23e4b588619845f9dbffbd946d6b00df6dac196c37a9165e9c538ce8942c28c7582345b9560e2297967c64d54b695d6cfba5cadff62d8b67812d666957920009cd209ec1fdbacbd493b3e40c0aee114487e470b95e85b548a5698e738e64a6c4ec052bc35f068be0e644924d7238c245cd65b2723c3d9ecfc43c55300948ba61501f724f5c9a6daf1089be7992bd9e42148a1fa3e79f8543cdfa421e9677cbc90edfc9acd7b35f48437aefd9a6859eed200da062b055b29261af25986b5a303171bc81947bf68096acbe12b6b3c66b13c30159df584a70d9e0743952ea9f636564e89bde54c8732ff837ad1cfbfc952bcfaa74aec3fc3fd5e2ec720dbe262c3f560b19c09e3c06ef222e77c36e2d17b2269285519b87fc326470c972bd81025a8c03450d3ef05eec96c163d23d1dd1bbdc34fda0af073e157a72c344c207fe7b596e60ba8a4be7fcd2a4799ec86e45112f7f223c56c4a0b79e341b9ff9b24f48594ea6ffaaca2fe3a93fe1582172ffa69d87b6754d93d9770786ad032d54441ae0ff24996f4874c0126ec2e4469b8740330f7f0cb4c13e2774692e4190758db007116fd4568a1555d0038921308117999a865fabe1863a75e2b5b52d53c0b502197cddb36e906366651fb6be2f791c6c0f34ec9f476bf63270852d7eeb4ea6f3a8f1727c5cef3c0fb47a68c31d2ac46bed9a65c890c24c326cfecebbd4f495cad972aa123b6ba2fca1ecca552d545a29d0bc25c555c5c8a5b030833dec25e2046fd7b2862f42d80a87b83140c4241fb9615433d23190cad0ae0494895597f732581a6fdfc2ab97b123b5b5137549090de4d3bf306cdbdfd23de1296a0ac6dc78f5d4f783c4acce8cb75bd8790afa91bcf462bade98b128bc37361875845a3a57c9e3411c83602b6ff36c5be87c8ac13fb0abdf1ac6eab005ed78d81a8656954470d1c16cb770a5c1db5865293fa1ca05a487cabe5a1bc2babf5e870785e756039eb659bea27d7720ba8503276626068267cbff19e0fd6037a2ca4fcff6e9da6c8b71843939a50b06cc3f0eb02c7980bb8db8956a1be232f9fa0688ff3ad8f3c33ba7473d8bf01a8fbd4cd8654163d1c5d879d55a77ee0e14abc77535af6d95cbe6624091cbe66c7563c2e747044749b515c9a71ac0901cb88ec10b1bd037898491fd3298aaa4b0b3085b118075eac3b6ecccc923cbf2717aada5c3734991886f08fea44d6c63baf1f0b5a497871278f31b8b36831bb0df22fd70ce960a1d551db0497fe9dee79dbf7d9b0845836606068cc783e023b175a5e2b6b12df07af62aae11566966bee782ba67179088db77c4c3a30e282168384405e6f86eeb8efa23544b87658879ff6bfaa0b6b87a858de39b553b97427bf48ea75798308baa30e7818c655e5265bd729675be965b7e3a1d6bfa7e490a67cc7f6fea709f35ba3997ccfd8cfbe42138030d7337c98052628e599b5338c3b6660d35627a2c360675fb42a62d33faeb5463246275a4bebbc99500c30197fdb228ed0a9131d285ab4ae2b6884603fa0cafd132e78428469493672f07c5d36ae6e72da1d716f6751bb59d2986ef048f7eff135777fae0d793bb591b3ec40a1325197b3283e390bd7926e8dace1165d5f3cb66db2eb192ba19c6b671f41ba18aa9b84bc412146ded7aa86e20ec97468bbb72a95b97da2666f988eb0e5d41c33536912573e3c1126755446d99bb36d2c4efe4efafee6ff3597d3bee961f2a1026a13626a203164b02a4dd57d6dc71bf077ddbe7eb034014bb4ce9e18360a73c49027baafb6e8034fcf0c2aaef3d5735b9b029a7d7d513b040ffcfde2f87bbe707a6ebf761848acda0d6660144a349f5b64ad710924899d0423c98ddb731b01e315b12f73d74227c8e89284516850c3b3d08b8e51c09416e4c1656c89b5bf251f62cf699d7bbe6cef13a57df1e664541c37576a47a7a4c686a56e18e070ee156f29d839adadcadaa4e6d5fa1bb6bc08fe07faa8d3e29caf7d7f73e3ca281e8e205e2bc4a27e64a81ca339e68b3b49cb6563b5cc0a6e5929a48a131952aea1063490d36104f2f1b13c7ef5881d9a29abe26f03891db187b5824e0486ff8d04e4283a402d2607e746a10be9afc2806090907c460a3c1ba5899b118bb6a1f6abc95708d13be9eac21308fa1779802e9ca0dfb30953602030f091064b5864ded5588adf1f42f9ec033ff3f4b232429a6fd34610712d698283cf5433ec9f166704a9c61aac98e782a79158a73141a6a2c901283eedda97cec1a7dfab896944f94ce1693097818df9ca8872885be23c62857d6732e30041d1f75671163c8a16a61af09082982ac16e4a6726ed04224343442dc3246f0b80d50715c6617f26064bcf3ce32096ca51e7ffc509312e9e4c4e885d2eea5b3ef31bc0e81265daabd607987f79d3d590e97cdec17b60e3e6b2c09eeafd238109d884a0fe2a7834873c0adacade3406b6b15ceb938d15bc9233e0a3624464f0aee0112012e73d7750ce043a783a2b01024b5e61846146976dc56b6b13850e3267f5678d2883a088c75e554ad0f448c660919d325666e54d25f4184c02a7882d1a41dfec39d7c6b29b93353c723d5972db4d9ae734faa209690cdd83f420a4d92b481c83f24627464977b0158e9250f99c907fd21177ebd6385c1a6ca87c6bca14ffde34cf986e853ddab720f5f8d5f15a19897dd264d87650d54b4575553ef4a14f4a0c4e8af07be0965f4527437454e3e3c2fccffe58e6d18e570e820c6faee78ae6fee3866f9eb7540b73a7c0fe54f9b9b187b0fbb7e2cc923a5bb5b7d03d1c388e426567e978c457a0d60e13d65d2fb6a35f45e400724f3df812d9d2d8dcda984e0b681300f887ba516fc3c06f29922d44ba3db62123028b17cf9fdbf0f70c71a587050e755fea1c67719fa3586f3759e618caa77929a66287002d3ff7d1e3121953b4a56b6b4db2f8fd743ce8b6532128258d44c175751bf3c5ccee8463aff6f32483458659aa5fb7a6dafdf1dfc3150a308ced5da0c7781451f4419ba35abdc1706318c2433b163273f7879caec401021e27c34aa0c7d84a8b66066a025bdd9d59d20650778cb8daf40c9001d6dc23f6dc65f6bc31218360606d66314febb1a46adb7b88c12acadb3878b2a3f13be0556e716ce251da19d989dadaa4fe95cab108f9c63842f973ac2beb374ffbff8b82f569536c0cbc089bce993283e1dd05bdb925a66426799b0c35f6f969a22dc29813159a419f45d543af9dad1cad1cadee2ccca391ccfa0924974973b181e18850670366f25c12aabb516fc2256148bcfae54342db0065b13d52df6146ae8340fdade0ca61fd9f2e565b41d92c979765423a0dcbbb114479566b00f7f086af0d587786c9dcf4"}], 0x240}}, {{&(0x7f0000000980)=@xdp, 0x0, &(0x7f0000001040)=[{&(0x7f0000000ac0)="b5b6efa3ee3cf6ee76e533fd14bcc8bf794550f5c4d154740fb984693ccf15b06a2c1ff8a7e9238c3d06a9d298eef2be5fcde06b84b6e2c751c01d453784b4e47db8f01a142406dff11f2c913acf82b0ccff181f48846cd13c891844b92280292cf04b4998d18059ce4ca21b4ec3120e8766c4a0018cb77d8d35b5d0aa8e41"}, {&(0x7f0000000b40)="2d14c17c9a8439f9f45149eb709b011666ce359e2884865d5e3565d94f1ab1ceba6fcab5ceecdeb7b3b381c965451f5517eb1b3fca43b52b3d5ec31625b73d2146d24c66c1e1c3e8b7f09d191bb003bf"}, {&(0x7f0000000a00)="80f02eefbe9d5c48f647f1effcf855955e86fb29c61085886a6f845867b2bc43"}, {&(0x7f0000000bc0)="571d87871def243d0feb0e4e4aa4bd42b5b39a3050d771023609d718c97c81b764eb0127c3e0ab4c23283c431a"}, {&(0x7f0000000c00)="cdba193c1016cc07902d422a2933d6802d047ebe238d308e61b98ba1dce8cea40a8cd650b82e0b509342baf3383ce8517fb9f7761da0d5ecb227dcb5781a8abc49c942f239c5b3810008144126fdc83c8bf0cf037cbc2a435d7218690bdd083f3fb70091092241e557e430838232e87cd51313cdda24c5149a97e018d62e6461c680d10b6051109e16b05a3c6433083af99abf4f821afce827fd5ad5a441e62f692fc64993ba108e5a6be4dee56101028008befa9f3ac7375d1f6db308ec2382faeac8c1f49269f873d08548bc98c478573b71ccd7f72c94e6a123"}, {&(0x7f0000000d00)="b0b62dbdcec4d9fc516beb922b0cfc2b6e1f3f54e1f08b92b19e9acd6e1952d7483dc8a8645892c4d89cd3d33695bba011f3cfecd0e4073cfffc606558e55ddd614da52c2140a269ca378a96b17ab9b331338c42df3985d2aec10782e6a8302e2a5e36b3b60c33e5604e32031da187cd8f9a76cd327ec14e761eae1f01bb2a498a054235c368"}, {&(0x7f0000003d80)="89113dde9d1feda559ff5dfc3715bd06bf9e48fe45a78912d99c02a54d9c5cd59114b2b6299c4300a1eadfc58a2ee07b3d8f61faf20ee58cd7879cb60d129429834fec9d5c615cbf73651e0070d8d520b9df887fa65b80e53afb755908e50fd6c94ec4eea2513171aadf591f2e9a43ac1ac62d404ffe8b85a32f0beef2953c3d4beafe8c3fec6cc965e16a1b92dbffb48f8c32657772bd0c3108f6447f09a742b45e5fa98f99430537fb6505ad4ed9b6c799cc28cbf3419c3ab9e071584e77c1586312229c52380ab86b2db33e30c7a6d92398e5fc1e76f5e6e726733011f7d5e5cade9aaf25b1e58f4938db79ecdf3284776f4737e99da85c54900a43948e56064bf0492aef01cab80ac0f3e7f521fddb439cdeba85ee91b0e6d6adb566210e9901583b37828fda92939478c2ed724987b9f1682f432700496a2cd1fe50e2627b45a4a221efd62117c8579f32ca3cd886f66755a8396a9cfe2b65af09931abb779d100b02d843fcbb4d0e42342daa2470612fddc4d1b692372ab0657f7fabe2c2cb216aa58306c57f3eef5a700d9124644844d33180d29b3394a8b4af4ceb8e0efa71114bd973bf8d3ac7f0e4b9d1dfa0d4cc12b17cbdc50022c427f940b7d229981e15e564b7baf4752aac49507b0ca8f987bfc32202ef377539f18d3b8232926c4fa4e1278d96343bc916fec2c3956fb339f8ed866deeae38ae906d3ec47c0657ad0402d8fb90784925751280948ab66ca4d5a707514f70e42b019550c0598771f416986db6221df2c610338714e2161ce7016b66aced114549a0aca84ec07b8bd693effdd2c176179daa934dc600109b465fcd6b7adc644c8bbf90a144c6e9c3d4047596dfc39b5c289dc5c799da59c09c55b38beb1c99bdf35cdf91023c382317587a08d1577c17f03b9360fae87123c513798a0fde4d1bf4fd6d0436157451e6a0358d3f45005195188c856da46d977a176ccbbeaebb0293cfd6f3909b2d65c26f64e2ed68a55941f2c23cecd29957d96e1370ea5aeaff631d41858dc6f6a686c6ab2fec68d1a291cbcd8def11bec4d1c7179e34be9e2b7f4820a60577f4ce5cc892318ca5ea143d5cde47f48c15d38079f74475354a58bb7dc48942ededc98e4028e01209ba9d986a325cf79a7c2056f1350f639d094465f6222a5dfaacf5b797261d4c3c374921c38c8cdbd237ead20e7d8da52f160721e03f21a3cc4c01e4714fcf3532e6253f72b5b29e1f0a86a28f8963288fa9720add03e6d633dbb1fbd3d742667daf2d36b64a51da8af62a8b479ba1081bc2a8e8ef8b75c3762e16c6e6034fab27a6a4ba26c7aaddbc0bdba68fda9f293e7065019eaba640e5427da27df0afc879fcca45c8fd811800fc5c4287401a74259356bfc1716d1faf9ebac17ef119366998d95ad42ad3aaf20f3b79b8467dcb1ffd79564118b81bfe0c2fd61ca08b5ec1f9651c6402f285a54cc0e00e4450f68cc7ae3b379c961a1d2534e865ddaefe69ab750404ce3f95eae7748852632bcf4a7ff38f26a5b48f8906cbc43818c2a598d8d25a64b9e5c0ccade6eda41e940bfa74e6da8e015108e22ae5eed5e7781e1d783b7c3360d4ac5a38f0d68b79a01ea6171226d5c2750b2691ff9d3afd408546816f823d6518c8ec50c3b2673a843077c3f9cde25e98125615cdbd7a446e637f325f537c3d5175d411757693517d2c107431634bc80b71c680e0e01c25b962c59a9803c766458099a5ded35509dbcc6137ef262459ffbd512413b4bc8f1272f13c839152226c5691d363cd3b0801f783858cd7c7d960e91e43f6dcae4586c3cb719291e2c7855d8995874742e85e391ac48d34f258928db20a0e2f44f131b89ce609a0fe738969b374fea2fbd6c809e8690e9246895c068b906e3b33814f93a0ec10bf5cb395c64d4dd892dcd64c8143c3581a7b0bbe5db49b09ae80d5aa39f50eb242b8d6f5dd1eb5aa5ee51a5cad687534b940bca2c29a23c731ff6c8baad844b07d5932b90f8746e8f0d24961dd8f8ae766a467c21375e1075ad98486c168c0e4bd5a6f3a6b4a40e8db3a07e99e7a86533f939ee11ec2d5f6e6c56287b01335b4a419fd672b7b4d22706a804d480c37a47607ad3c785c4ba1b2ab986f587c8f6da671763489b47baf5b505e982d349a24721dc8e5e385a7994ad18ab4289e273fb39f72b61df5faea85b64e6fc4343073303d89076a9f07380437f2b0d836e5095531737093890f4d95705f66564bf2a5ca126b9338076e367c93140c32a1c2c3e3bc1a344e15c60a2682b14d6e901a4252d815cf94d27d23f53268350e7aa8dfbc1c6d9064a9747c18f3d0cc3701a44ae9df4ff11303529d0f3c9419c558dd7a38887f528da90fab19942a3bd529ccd4d6220ec14316530b200895eff9b661e44c1f8a288fc05bcfac796d9080354e9a73bfac771c952f2ebec2b3250717b60387a0674a3b57b2ab826066812ec7255c8a668e088dbd7aea5d6dab0693ca7bbae1db1f7629c81ffd09ed30c9e61b755c500509888a9f81392a9fbfc1175f94eda0af6f3eb9f5fa1d2d9c4eb7c49dcf8a8a7cabe37d9dd5db07ab70b0355fcd343a97830aa1107eda8e0d12be1210260b2eaf3131c2b79dc4092582d15793cf84f8ec7fc2240b6a3c7185950c8fb72e9a8bbc1d0352920ca2b96c087418df23ac25195e73582959c466de91a14fd207ddd115affa436fb7a4c1092588681d0a44485d68b8a58801f498e5049d022f6770c0c2e485dd1d174adf9be3bddcc13a8c318ab8d40f91efe6e7f7551632bc0e7b5f57dee7dc2bca0a508223a6868fe7915349b58a95d23f8d14d91f608e7d4b7043444329e45e1ee4aaeeec10597278a2b5bd209e90d3a56bbda7ce88951db2e25f499e32eb0bd07ad78e73f131a7ff33b7bf3f74d3cb885d7431895d3b9eb3d3813e908e008eebe1e29023fecafa5173a388e3d65fcac0464687f8b9bd6c03433be7d3fb67ecb13186267c6b3aa17dcc7da4e4bbe53e66f81467bdaf06f1b741a1c1d16247cba5b50dfc3abeaab6f7e239fd723af84d7d915907dbcda8495254e9ae21c81260625efc588e6ad834dc5d0f4485428353bc4d14216f7bd45ac3d457b4f0a1bf13bf7e88adf2373fc5f24b2cdaf6339ba4283ecc91e8524ef7048d64465a4ca78db4e5184f2c6391db9bcb98cde8429051a7e2fd204e5ba82adad070a23bc88de76f4fc9a9f2e4b96bf784f8c396d1d3f30a3778d52ac13a25474ec5c37f63b5e3dec6735296c83ff602fe01e9712df347da7cf3441ef426804273f264365c0a02f9471f27579074f1a13a74e889cce5b33a6d41491151c6ef56dcda32907093d9b41db4f18d8c843927e51f5a5dfcc486eaba1eb6f06387b0fecdd1862d6e5a66779198d329d50e9adf58f111008b5742e8d3515bb3ff5b7a41815ee5e1f0d8ce29843dcab8102c767d8ceb6cb9c3d8913af06c0e16a17afe400b0c417648f92117c67396f3c60ea3dfbcc1d67714ad2a4f30031dba81ef6e5f7d074add49c6a847e1aad505003171a329a6c2b9b37600521bc3aaf17b3699b96de047c72bb148f569ec22a9b779b26f232dd95be0518edc0835ce47f41321dcb746dc4973eeeb3de9d25c92078374b278d97e988ef4a4c9c6bdc969c9844e726256e0d04e58bd522aff17eba5830e1195bda8eecc2e49900e203e88e50ebf61e57eb8126d2a0397e55c2d596bc43e920b99fbd12144394471c4837a23aa361b862fbd8d49079501c14892a7210a87e4b68d10fb0039e3c3ebc221306473c26e6097829f011a4324cb63755a7df9adeee50942bc40ba98146f0c3584757d30b9b874be6820b08ac3c117e87a5142f8cabdb0f0fc5b8660192b2d3145f9b8c6e5817d9339bfdf52df5d2d3edb6537e650997b7a84d5974339a0e986a3ae4984c58dd7c88bcc13d85f4e735215c9b013f6c9b266894b7e6e960a8a5b9e7e123c87c6d81e7a1af3100c65b6270686b9066d08923d0fe51817290a7abaaee1fe880116be33ca3f1ca98ae215e92dfaa520190b2f3e23619f00a04f4b4e7393cf5edf8138f8707bb49d995ab81223425105435aa81489e661353b10ba86ef93910b8d58cf185f860523ffb8c45b4bb919ad351d6fa1eb8190e212f5066686cea14cfad61ac36c0503332ae31319b2a55615fce349214e84b454b1661475c7206d4f89c9189ab3501a6fb5c8609ac208aea516d813d2bb2da79a44e277074b010140c59c44dd5f56c2fdf1b2ff56065494981fd6927d1e9001c82531b9e13d37e07968af7e5c6a5da3c0c8766ba197d024c611b0fa918b645e4ec9cb5d8af38fc8f01e030a28ae836c953409a07d22ad21f1f9489d4f3227454340108271a9f5f5198474536f86d58d5ff9d4df80badf52a1b1a8d978e641406ec54d8d076563945e8efa52f76ad4a9956a8c72f405ec463f810d5b93d8c10a91a6ce29ff0737642dbd8a36f28878d19e1f0d6c4d8d7308438466d668a7542bcfe9bc822d25cf078c108bfd40ef433ee30d110df10c0adcb2e2b77f08909b4f93424a229bffc065b8fa7b9b5c8e78884c390d946ee08b5f005b23c5e9bcf7895fe17a4bdabd6d3fca2b4695a11bc3c3a85c8c741f295688e5f752ad3fde993a85e9b4d330bb7a1602f8b758317f38d4259389a6135f36e4cf5e71f23a9c25f5b82fd4acef171501de7e856f63b13bee210fe0b4d7dc358893aecef4068335e486c1623be677db74077277dbd60e117a25a06e4e5ed6e0db46b2ffefd8451e19c6ffe25a832f0464182e89716445fa199fbc399fa2d115778a284061dc42e943409ff4e811721829cd06592bd5aeccd117f65cf62f86c03dd1364fc746d7a08ffba99ac81a2e8bfb0a59439aa0a7c3feb5b1ffa6af28caf021973fc920a18f44df32585f8085dc68bb341aafef844538e8edfa5c46dd50c5a913a38f2542efadc35df49383017197ec582b3b2470c11a8817a5d69694d71a74e79be78022aca5d59e62f3faedcba282bc11161a45e1cd6469fcce85d5128f13e541d8a6b6338d858ba7fe6d34cc866e98760ca58bb794ab80906f6ff8c5ba17b792572b9158d6330386e800d8dd764d2ff2ac535d4632d638c0b9413b0b7394de05f5fa6710daa0565a4f8c95b75a43f6315c5935e9dee13d6b83f15354ca75c9291afdc9a348e36b19c492329906968d32690f60af7f774a40720bbf94092216a3a95dfdf310122879cd9f257bdac24689be4e1c64ff88d0891a82fa812dadb233bb80e1e832c3033f060c13bc297e1be93733f54b24ae6ca54d656dcb1beac88fae87b18fd6dfb716f9647d417d82334995179d148ecdd1ca4121f70ab41b532e93e3799c90044599d3fb669c632affe5dbd6c4618fb3e7ac54ff04c97e84393b1aa7b594740fae8b97cd463acb898e819e671f3f80c7921f16def994cce1915e60c89d14167526cc6b2cdc378fe55d4d3373ee540133c077a5115660c36da0dc328aed97cc1c8a0cf074bb520e6c4b363774333b366d29fd6daec27a86b8b5e86cf97e2aa10eb6ea5b9a06543349fb398ccb38b8c457c31ff1a0c8ba2cb4658138ed45453640d98526e9e7339c7c99f17ab76f7819b08176d7a48000c18dc23561046c352bff6b2a0c4a875f9a5c362498017afb88effca2e1d8228a4751bf7dc67a1c398bc4a355b7c07d96982144f3655c5483a7cc3bae468024bb13b4d2fb906cb82d10386799e56fadf3140e5fedcf3ba777524203ec49fbc657bdfa6ac8057c660940c20b462cd9db6d85b29fe82b9eecee7d62"}]}}, {{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f00)="debb26"}], 0x0, &(0x7f0000001200)=[{0x0, 0x0, 0x0, "44ce551f94299f96b37293ddf9e2807fb7f7776cbafb35195991c6874b65f3ae24ddeea7c0c0c215276aa27b49e81e2fc28ef7b013d6229e255a5360c06ceadc53641d230febc8deac20c97e3f085ca611d59633771b6f0192c762f45ac77a828eece1c849186f0bd0026d5bda44b8be1e8f97ed4b17696aee1c5f9f52d56385"}]}}, {{&(0x7f0000005d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005e00)="e59ad4a8fd489b2204add353a0b0fc6d1abce2c8eff8c99b6721ab5c5c1b92b6af47114beab3765d5b7d1cbc995eac0ce1c9aac1b026d80153d4f4754c8bfd2d288752e12b066436482b797d8f8b2b0cc789fcee0952368bf0a6c9370fc752712542ab4084be762a41ada939d89cc22dff94a67bf20783b402c613b0b9021f1cfeb7426c787fc5e7e192faa02b180ec28f59cd53c58923b4d29bd19d121c5a19691ba213fa61fece9edd8656bc15d26b60dc8a5b2bfe48aaf10352a03fa5c0db691517461daecd6cbd8c3f8f9f95b6e2fcb6210acecca33f8b37d6ebd91ce9acacc938f863e21ae6ff419556aa1b1934534f5b02"}, {&(0x7f0000001900)="303d199c42a8aac561d58f09e2c084940ac9506012b92fee72051e016e8d6df58e36130cc023db5773"}], 0x0, 0x0, 0xfffffffffffffeb1}}], 0x2, 0x854) 09:58:07 executing program 3: unshare(0x400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000001100)) 09:58:08 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/15) semop(0x0, &(0x7f0000000040)=[{}, {}], 0x90) semctl$SETALL(0x0, 0x0, 0x10, 0x0) 09:58:08 executing program 5: r0 = syz_usb_connect(0x0, 0x1d6, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009fbbd708401c3405bf1c000000010902120001000000000904c50000358439001e268f882271709bdc4a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:58:08 executing program 4: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000be000000002000bc379650228cd79e530000000000000040", @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="0000000001000400"/28, @ANYRES32, @ANYBLOB='\x00'/23, @ANYRES32]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1480.374832][T17716] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1480.632089][T17716] usb 6-1: Using ep0 maxpacket: 8 [ 1480.752218][T17716] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 1480.760458][T17716] usb 6-1: config 0 has no interface number 0 [ 1480.766867][T17716] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=1c.bf [ 1480.776029][T17716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.785716][T17716] usb 6-1: config 0 descriptor?? [ 1480.826317][T17716] i2c-tiny-usb 6-1:0.197: version 1c.bf found at bus 006 address 027 [ 1481.252198][T17716] (null): failure reading functionality [ 1481.272666][T17716] i2c i2c-0: failure reading functionality [ 1481.281321][T17716] i2c i2c-0: connected i2c-tiny-usb device [ 1481.290598][T17716] usb 6-1: USB disconnect, device number 27 [ 1482.002198][T17716] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1482.242173][T17716] usb 6-1: Using ep0 maxpacket: 8 [ 1482.362336][T17716] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 1482.370658][T17716] usb 6-1: config 0 has no interface number 0 [ 1482.377023][T17716] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=1c.bf [ 1482.386235][T17716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.395864][T17716] usb 6-1: config 0 descriptor?? [ 1482.436098][T17716] i2c-tiny-usb 6-1:0.197: version 1c.bf found at bus 006 address 028 [ 1482.643515][T17716] (null): failure setting delay to 10us [ 1482.649321][T17716] i2c-tiny-usb: probe of 6-1:0.197 failed with error -5 [ 1482.659543][T17716] usb 6-1: USB disconnect, device number 28 09:58:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0xf, 0x0) 09:58:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) unshare(0x8000400) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 09:58:14 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/15) semop(0x0, &(0x7f0000000040)=[{}, {}], 0x90) semctl$SETALL(0x0, 0x0, 0x10, 0x0) 09:58:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') poll(&(0x7f0000000400)=[{r2}], 0x1, 0x0) 09:58:14 executing program 4: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000be000000002000bc379650228cd79e530000000000000040", @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="0000000001000400"/28, @ANYRES32, @ANYBLOB='\x00'/23, @ANYRES32]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:58:14 executing program 5: r0 = syz_usb_connect(0x0, 0x1d6, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009fbbd708401c3405bf1c000000010902120001000000000904c50000358439001e268f882271709bdc4a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:58:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x4, r2}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000140)={@remote, @remote, [], {@llc_tr={0x11, {@snap={0x0, 0x0, '\b', "e7ae37"}}}}}, 0x0) 09:58:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x79737553, 0xd8}}) 09:58:15 executing program 4: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000be000000002000bc379650228cd79e530000000000000040", @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="0000000001000400"/28, @ANYRES32, @ANYBLOB='\x00'/23, @ANYRES32]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:58:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) move_pages(0x0, 0x327, &(0x7f0000000100)=[&(0x7f0000c00000/0x400000)=nil], 0x0, &(0x7f0000000200), 0x0) [ 1487.202143][T20291] usb 6-1: new high-speed USB device number 29 using dummy_hcd 09:58:15 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xb) 09:58:15 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43, 0x9, 0x2, {0x2, 0x7, 0x4, 0x2, 0x9, 0x8000, 0x20, 0x400, 0xfffffffd}}, 0x43) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlinkat(r0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)=""/38, 0x26) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='proc\x00', &(0x7f0000000740)='!\x00']) 09:58:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) r6 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x30a, 0x0) [ 1487.443081][T20291] usb 6-1: Using ep0 maxpacket: 8 [ 1487.562367][T20291] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 1487.570773][T20291] usb 6-1: config 0 has no interface number 0 [ 1487.577206][T20291] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=1c.bf [ 1487.586637][T20291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.661504][T20291] usb 6-1: config 0 descriptor?? [ 1487.706850][T20291] i2c-tiny-usb 6-1:0.197: version 1c.bf found at bus 006 address 029 [ 1488.132325][T20291] (null): failure reading functionality [ 1488.152454][T20291] i2c i2c-0: failure reading functionality [ 1488.160984][T20291] i2c i2c-0: connected i2c-tiny-usb device [ 1488.170141][T20291] usb 6-1: USB disconnect, device number 29 [ 1492.892748][T20302] kworker/dying (20302) used greatest stack depth: 51408 bytes left 09:58:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x34343459}}) 09:58:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup2(r1, r0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 09:58:22 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e0000001e008109e00f80ecdb4cb92e0a4824181e0cd30be8bd6efb080003000e00140013000000060005001200", 0x2e}], 0x1}, 0x0) 09:58:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 09:58:22 executing program 1: r0 = socket(0x400140000000015, 0x805, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x80000000000114, 0x271c, 0x0, &(0x7f0000000040)=0x7ffff000) 09:58:22 executing program 5: r0 = syz_usb_connect(0x0, 0x1d6, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009fbbd708401c3405bf1c000000010902120001000000000904c50000358439001e268f882271709bdc4a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1494.184541][T31111] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1494.192985][T31111] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 09:58:22 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040563e, &(0x7f0000000100)) 09:58:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00f3320102e28de82febc7fdcb58839a31f0a38cf0b38ea9478415ba52f839230900080000000000000048b4d7a622f9af3e4707361d5a9a80fc9fd818a017ca15daf31555f15ced32da6bb43f170f003326d3af5cacaf4c6fc68cd946ca88bb09c2cdee94000000000000000000000000fc98a362817707c49edcabb5aab028ef7ff5bac8e87588980ca6bd62ecc48501f572"], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 09:58:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 09:58:22 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1494.472241][T20291] usb 6-1: new high-speed USB device number 30 using dummy_hcd 09:58:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xffffffffffffffd3, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:58:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff8118473fb734480477a9773b24ca945f64009400050028925aa8000000000000008000f0fffeffe80900f36fa5e24beb0d431000010002040800417d00000000dd9d", 0x58}], 0x1) 09:58:22 executing program 4: r0 = socket(0x200000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="2400000052001f0014f9f407112c04091c0007ed10000100400000000900000000000000", 0x24) [ 1494.717622][T20291] usb 6-1: Using ep0 maxpacket: 8 [ 1494.762776][T17716] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1494.852822][T20291] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 1494.861202][T20291] usb 6-1: config 0 has no interface number 0 [ 1494.867551][T20291] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=1c.bf [ 1494.876810][T20291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.889473][T20291] usb 6-1: config 0 descriptor?? [ 1494.946558][T20291] i2c-tiny-usb 6-1:0.197: version 1c.bf found at bus 006 address 030 [ 1495.002281][T17716] usb 2-1: Using ep0 maxpacket: 8 [ 1495.122229][T17716] usb 2-1: config 0 has an invalid interface number: 26 but max is 0 [ 1495.130577][T17716] usb 2-1: config 0 has no interface number 0 [ 1495.136978][T17716] usb 2-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1495.146969][T17716] usb 2-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1495.156250][T17716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.165847][T17716] usb 2-1: config 0 descriptor?? [ 1495.382392][T20291] (null): failure reading functionality [ 1495.402646][T20291] i2c i2c-0: failure reading functionality [ 1495.411511][T20291] i2c i2c-0: connected i2c-tiny-usb device [ 1495.420475][T20291] usb 6-1: USB disconnect, device number 30 [ 1495.422651][T17716] hdpvr 2-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1495.436765][T17716] hdpvr 2-1:0.26: untested firmware, the driver might not work. [ 1496.207613][T17716] ir-kbd-i2c 0-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 1496.232275][T17716] hdpvr 2-1:0.26: Could not setup controls [ 1496.239162][T17716] hdpvr 2-1:0.26: registering videodev failed [ 1496.256386][T17716] hdpvr: probe of 2-1:0.26 failed with error -71 [ 1496.265854][T17716] usb 2-1: USB disconnect, device number 27 [ 1496.742229][T17716] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1496.982160][T17716] usb 2-1: Using ep0 maxpacket: 8 [ 1497.102267][T17716] usb 2-1: config 0 has an invalid interface number: 26 but max is 0 [ 1497.110532][T17716] usb 2-1: config 0 has no interface number 0 [ 1497.116853][T17716] usb 2-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1497.126833][T17716] usb 2-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1497.136029][T17716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.145448][T17716] usb 2-1: config 0 descriptor?? [ 1497.392280][T17716] hdpvr 2-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1497.402430][T17716] hdpvr 2-1:0.26: untested firmware, the driver might not work. [ 1497.542486][T17716] hdpvr 2-1:0.26: device init failed [ 1497.547947][T17716] hdpvr: probe of 2-1:0.26 failed with error -12 [ 1497.557409][T17716] usb 2-1: USB disconnect, device number 28 09:58:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x2, 0x300) 09:58:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x350, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="8d", 0x392}]) r3 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 09:58:29 executing program 3: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, 0x0, 0x0) 09:58:29 executing program 5: r0 = syz_usb_connect(0x0, 0x1d6, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009fbbd708401c3405bf1c000000010902120001000000000904c50000358439001e268f882271709bdc4a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:58:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) dup3(r0, r1, 0x0) 09:58:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:58:29 executing program 4: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000001f80)=[{&(0x7f0000001b00)=""/108, 0x6c}, {0x0, 0x7aefff7f}, {0x0}, {0x0}], 0x4, &(0x7f00000023c0)=[{&(0x7f0000002040)=""/134, 0x86}, {0x0}], 0x2, 0x0) 09:58:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0) [ 1501.785465][T17716] usb 6-1: new high-speed USB device number 31 using dummy_hcd 09:58:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000000)) 09:58:30 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='\xe4e\x00\x00\x00\x99\xb0t\x00', 0x641000, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e21, @multicast2}}) unshare(0x40000000) 09:58:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x107800, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1502.052718][T17716] usb 6-1: Using ep0 maxpacket: 8 [ 1502.128985][T31401] IPVS: ftp: loaded support on port[0] = 21 09:58:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @dev}, 0x4}}, 0x26) getpeername(r2, 0x0, 0x0) [ 1502.182648][T17716] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 1502.190945][T17716] usb 6-1: config 0 has no interface number 0 [ 1502.197341][T17716] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=1c.bf [ 1502.207194][T17716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.288858][T17716] usb 6-1: config 0 descriptor?? [ 1502.347606][T17716] i2c-tiny-usb 6-1:0.197: version 1c.bf found at bus 006 address 031 09:58:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000001c40)='./file0\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000027000)={0x1}) ftruncate(r1, 0x0) 09:58:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b01adc2f2", 0x10}], 0x1}, 0x0) 09:58:30 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 1502.782471][T17716] (null): failure reading functionality [ 1502.812618][T17716] i2c i2c-0: failure reading functionality [ 1502.825439][T17716] i2c i2c-0: connected i2c-tiny-usb device [ 1502.858006][T17716] usb 6-1: USB disconnect, device number 31 09:58:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl(r0, 0xc0045878, 0x0) 09:58:31 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='\xe4e\x00\x00\x00\x99\xb0t\x00', 0x641000, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e21, @multicast2}}) unshare(0x40000000) [ 1503.350776][T31630] IPVS: ftp: loaded support on port[0] = 21 [ 1505.699880][T31634] net_ratelimit: 2 callbacks suppressed [ 1505.699892][T31634] Dead loop on virtual device ip6_vti0, fix it urgently! 09:58:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(r1, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x10}, [], {}, [], {0x8}}, 0x20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 09:58:36 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x0]) 09:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000280)={0x0, {}, 0x0, &(0x7f0000000200)="660f3a412c53b16746cfc481f85bba00008020c4e3697c4dca00c4417852b50000000041d2fbc403b179846403000000e843fa0f01508346d9e5"}, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd9000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 09:58:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) writev(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000002c0)="cd", 0x1}], 0x2) 09:58:36 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='\xe4e\x00\x00\x00\x99\xb0t\x00', 0x641000, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e21, @multicast2}}) unshare(0x40000000) 09:58:36 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xda39, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0xe}}) [ 1508.705922][T31642] IPVS: ftp: loaded support on port[0] = 21 09:58:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000001180), 0x4) 09:58:36 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xc, 0x0, &(0x7f0000000040)) 09:58:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 09:58:37 executing program 3: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000000080)) 09:58:37 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c0000001200ff09ff1cfe956fa283b724a6007d00000000000008000000150024002e001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 09:58:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000001180), 0x4) [ 1509.169916][T31773] netlink: 'syz-executor.5': attribute type 46 has an invalid length. [ 1509.178360][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1509.187936][T31773] netlink: 'syz-executor.5': attribute type 46 has an invalid length. [ 1509.196272][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:58:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000040000bc70000000000000950000000000000053f70dd549673106972055bfd00152ce37f8a1c1f6fb75872b847627d0e8aec0efdfba2314f0305001b3c2d4b282c0f27d3a46f763cd93f8b699bf18c4843baf3a5a87fdedf77745dc90dd38281539b5304d0eb657c5f2bb8b"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) close(r7) r8 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x2) 09:58:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000001180), 0x4) 09:58:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='B', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0x16a}, {&(0x7f00000020c0)="97c2a25d646c19cbf1dda8ac9e95504f74be23e8a6dee863326ede09ed2cde404fa4bcbd5b96a50bb9e9e643b8933f961f1c383d4aae179e27de9a836e0fd82ae20175ebebb386adb2112455e64b7f85bf9236a2b0b379e82c60d4d1d9e5fa4901c0c6c3397101f131903fb36428184532bf78fa5c1442d8988d70dd3d3b3e46b11bbfe293392a0c05eacb5348bf2f9e2e3adc32a643", 0x96}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(r2, r0) 09:58:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="d895ad3f7b8bd1bbe456a721dbc58508403a1f285fb9c4e08568f44881c613148172a038479905c47f3b59040210508b4cd567a869377cce3dd8ef") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x86871c9d2201c178}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:58:44 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='\xe4e\x00\x00\x00\x99\xb0t\x00', 0x641000, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e21, @multicast2}}) unshare(0x40000000) 09:58:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in=@empty}, 0x0, @in6=@empty, 0x0, 0x4}]}]}, 0x13c}}, 0x0) 09:58:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000001180), 0x4) [ 1516.084217][T31889] IPVS: ftp: loaded support on port[0] = 21 [ 1516.145826][T31885] kvm: pic: non byte write 09:58:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in=@empty}, 0x0, @in6=@empty, 0x0, 0x4}]}]}, 0x13c}}, 0x0) 09:58:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='B', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0x16a}, {&(0x7f00000020c0)="97c2a25d646c19cbf1dda8ac9e95504f74be23e8a6dee863326ede09ed2cde404fa4bcbd5b96a50bb9e9e643b8933f961f1c383d4aae179e27de9a836e0fd82ae20175ebebb386adb2112455e64b7f85bf9236a2b0b379e82c60d4d1d9e5fa4901c0c6c3397101f131903fb36428184532bf78fa5c1442d8988d70dd3d3b3e46b11bbfe293392a0c05eacb5348bf2f9e2e3adc32a643", 0x96}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(r2, r0) 09:58:44 executing program 4: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = gettid() recvmmsg(r0, &(0x7f0000003c00), 0x275, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x1004000000013) 09:58:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in=@empty}, 0x0, @in6=@empty, 0x0, 0x4}]}]}, 0x13c}}, 0x0) 09:58:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001006362710018040200140406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500"/1068], 0x444}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) [ 1516.675738][T31926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1518.572365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.578644][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.652383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.658583][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.661977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.661977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.661977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.661977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.661977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.661977][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:58:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) unshare(0x20400) ioctl$KDGETMODE(r0, 0x4004510d, 0x0) 09:58:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='B', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="beec2f2b1c8e68cc9de2d61ee6a0b516eee84aaf8c2e44fb7050ed6a50577065065d8e8fcce84cc65e197c6dd843de9cc46f6b940ce9997404001d53c016f416f7cfa5bbebdcaf8fa0ce0b03e20bd0c1f96ea9e5c84a8642e810c883be605844bcb9ce4890af44649861f1c3634a6a235e0e8c3ccdd55a2d6c11774773540a705c0b7d9daf3ff7dc9b09b20108e50cffe6ecca0eb62029383804d183c683013644539c978897276fa148d83d44b3878691a21ea9072d57c23c8b1384472ceacdb496d49c5835187d1c27fb26593f430247a0dc38992d26df4d395a9118a2ef636a99e28b4d33afa134418df37001c732270e2a779fdd4517a64e1a785df70d703f1dd40a001a06ada4d0f250dae72205f20ddadfb0e409765371f9a64bc2a9acf7722788c48c7750fe90ed50ff352effba63a86a9046740fb2aead62cf1999de8d20f80d0bccd63a5adb3d68508a547465911f49716b1c42fe085a32c1bc1cc266b7ba6e02dab0d64a28", 0x16a}, {&(0x7f00000020c0)="97c2a25d646c19cbf1dda8ac9e95504f74be23e8a6dee863326ede09ed2cde404fa4bcbd5b96a50bb9e9e643b8933f961f1c383d4aae179e27de9a836e0fd82ae20175ebebb386adb2112455e64b7f85bf9236a2b0b379e82c60d4d1d9e5fa4901c0c6c3397101f131903fb36428184532bf78fa5c1442d8988d70dd3d3b3e46b11bbfe293392a0c05eacb5348bf2f9e2e3adc32a643", 0x96}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(r2, r0) 09:58:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in=@empty}, 0x0, @in6=@empty, 0x0, 0x4}]}]}, 0x13c}}, 0x0) 09:58:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100090408000340000001400000", 0x58}], 0x1) 09:58:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006300)=[{&(0x7f00000005c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000600)="a2", 0x1}], 0x1, &(0x7f0000001c40)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x48}], 0x1d4, 0x0) 09:58:51 executing program 4: syz_usb_connect(0x0, 0x2b, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x9a, 0x77, 0xfa, 0x8, 0x4e8, 0x6889, 0xc391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x79, 0x0, 0x0, 0xff, 0x84, 0x51}}]}}]}}, 0x0) 09:58:51 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000640)={@remote, @multicast1, @local}, 0xc) 09:58:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 09:58:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006300)=[{&(0x7f00000005c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000600)="a2", 0x1}], 0x1, &(0x7f0000001c40)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x48}], 0x1d4, 0x0) 09:58:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='B', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0x16a}, {&(0x7f00000020c0)="97c2a25d646c19cbf1dda8ac9e95504f74be23e8a6dee863326ede09ed2cde404fa4bcbd5b96a50bb9e9e643b8933f961f1c383d4aae179e27de9a836e0fd82ae20175ebebb386adb2112455e64b7f85bf9236a2b0b379e82c60d4d1d9e5fa4901c0c6c3397101f131903fb36428184532bf78fa5c1442d8988d70dd3d3b3e46b11bbfe293392a0c05eacb5348bf2f9e2e3adc32a643", 0x96}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(r2, r0) [ 1523.622751][T20291] usb 5-1: new high-speed USB device number 57 using dummy_hcd 09:58:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006300)=[{&(0x7f00000005c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000600)="a2", 0x1}], 0x1, &(0x7f0000001c40)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x48}], 0x1d4, 0x0) 09:58:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x0, 0x1ff, 0x0, 0x200]}) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98SUo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 09:58:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents(r0, 0x0, 0x0) 09:58:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x0, 0x1ff, 0x0, 0x200]}) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) dup3(r5, r0, 0x0) 09:58:58 executing program 3: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f00000000c0)) ptrace(0x4206, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffcd}) 09:58:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_GETDRIVER(r0, 0xc0185500, &(0x7f0000000000)={0x30fc8046, "eb73b498d8a91155541886b9d0e7b55e4452179370f3f532214b8040c7791488e78807afe80a2d251da14cd2f4c9003cdf59bbc91a62608d6a4bc31afa653fedabfcc8e411c0972e0d6f76137b59129ddc06ebf0ce8a54c1b825a43d3336411f21d27835036b692ed285ee1e9d9931b756fd230f983747ef8132e56bff9e8ecd7868b37d246b1e8ca00059bf468ded65fc65e34e6877816c02ad983b58859910ef36f25c7ea5e65c9034ff27ca82dd762eb4c233fd4320ecb718ea9b23bab5f6bbf2cd782bdaaca2b92037941ca36c7aa85cbb59fd218bb7f81044829680a019e04676e3390d0c3f6aba802fb56e96e7f97211cedc5190ccaaa8e80dec704c35"}) [ 1530.979672][T32010] IPVS: ftp: loaded support on port[0] = 21 09:58:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x0, 0x1ff, 0x0, 0x200]}) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) dup3(r5, r0, 0x0) [ 1531.288841][T32127] IPVS: ftp: loaded support on port[0] = 21 09:59:05 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x300) close(r0) socket$kcm(0xa, 0x40122000080003, 0x11) sendmsg(r0, &(0x7f0000001bc0)={&(0x7f0000001340)=@un=@abs, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x70f000) 09:59:05 executing program 3: unshare(0x40000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x281, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:59:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) dup3(r5, r0, 0x0) 09:59:05 executing program 2: unshare(0x40000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x281, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:59:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x0, 0x1ff, 0x0, 0x200]}) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) dup3(r5, r0, 0x0) 09:59:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f00000000c0)={0x400, "d29b8d2191596fd4fce7b249e887a94cc71e0b2092e09be7d66c9335d2812e5c", 0x1}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x102) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 09:59:06 executing program 3: unshare(0x40000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x281, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:59:06 executing program 2: unshare(0x40000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x281, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 1538.528719][T32307] IPVS: ftp: loaded support on port[0] = 21 [ 1538.561433][T32308] IPVS: ftp: loaded support on port[0] = 21 09:59:06 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvfrom$inet6(r1, &(0x7f00000003c0)=""/226, 0xfffffffffffffec8, 0x0, 0x0, 0x0) close(r1) 09:59:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f00000000c0)={0x400, "d29b8d2191596fd4fce7b249e887a94cc71e0b2092e09be7d66c9335d2812e5c", 0x1}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x102) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600)=0x1da9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 1538.720058][ C0] net_ratelimit: 26 callbacks suppressed [ 1538.720154][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:59:13 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x300) close(r0) socket$kcm(0xa, 0x40122000080003, 0x11) sendmsg(r0, &(0x7f0000001bc0)={&(0x7f0000001340)=@un=@abs, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x70f000) 09:59:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x44}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0x348, &(0x7f0000000480)=""/195}, 0x48) 09:59:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_TTL={0x8, 0x13}]]}}}]}, 0x38}}, 0x0) 09:59:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmmsg$sock(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="0d38fd43ee059cd9afd9fe8d5a3c4569", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="89bb97f6f1fb5a149851a25a6069e1e0", 0x10}], 0x1}}], 0x2, 0x0) 09:59:13 executing program 3: unshare(0x40000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x281, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:59:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x0, 0x0, 0x1000000000006}, 0x20) [ 1545.084097][T32443] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 1545.100409][T32442] IPVS: ftp: loaded support on port[0] = 21 09:59:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000001, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7}, 0x7) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/187, 0x7}], 0x1}}], 0x1, 0xea225aec34b9dd0e, 0x0) 09:59:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x0, "046653db743699511318088732941da57988d24719ea43d970d9f1da0a19e4d2"}) 09:59:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5}) 09:59:13 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x3c}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffff6}, 0x48) 09:59:13 executing program 1: r0 = inotify_init1(0x0) r1 = dup2(r0, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 09:59:13 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x103) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r0) write(r2, &(0x7f0000000100), 0x14088) 09:59:17 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x300) close(r0) socket$kcm(0xa, 0x40122000080003, 0x11) sendmsg(r0, &(0x7f0000001bc0)={&(0x7f0000001340)=@un=@abs, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x70f000) 09:59:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5}) 09:59:17 executing program 3: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x100000000000031, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 09:59:17 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x7ffd) sendfile(r0, r0, &(0x7f0000000040), 0xff8) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0) 09:59:17 executing program 1: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 09:59:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="740000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000c0001007463696e64657800440002ea6fbc0a5fe461eb00000000000000002000100000000000000000400000000000000000000000000000fd00b413fc75135064e404000000000000040000000000"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 09:59:17 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f00000004c0)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') 09:59:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5}) 09:59:17 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044d76, &(0x7f0000000080)) 09:59:17 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 09:59:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0) [ 1549.582310][T27495] usb 2-1: new high-speed USB device number 29 using dummy_hcd 09:59:17 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) [ 1549.942441][T27495] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1549.950871][T27495] usb 2-1: config 0 has no interface number 0 [ 1549.957281][T27495] usb 2-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1549.968243][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1549.979827][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1549.982738][T18117] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1549.991286][T27495] usb 2-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1550.012434][T27495] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1550.021521][T27495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.031747][T27495] usb 2-1: config 0 descriptor?? [ 1550.079242][T27495] iowarrior 2-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior4 [ 1550.242051][T18117] usb 6-1: Using ep0 maxpacket: 8 [ 1550.276619][T32594] imon:display_open: could not find interface for minor 0 [ 1550.286275][T27495] usb 2-1: USB disconnect, device number 29 [ 1550.295232][T27495] iowarrior 2-1:0.135: I/O-Warror #4 now disconnected [ 1550.362455][T18117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.373649][T18117] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1550.386690][T18117] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 1550.395961][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.405573][T18117] usb 6-1: config 0 descriptor?? [ 1550.885175][T18117] holtek 0003:1241:5015.0026: unknown main item tag 0x0 [ 1550.892549][T18117] holtek 0003:1241:5015.0026: unknown main item tag 0x0 [ 1550.899736][T18117] holtek 0003:1241:5015.0026: unknown main item tag 0x0 [ 1550.907099][T18117] holtek 0003:1241:5015.0026: unknown main item tag 0x0 [ 1550.914439][T18117] holtek 0003:1241:5015.0026: unknown main item tag 0x0 [ 1550.921617][T18117] holtek 0003:1241:5015.0026: unknown main item tag 0x0 [ 1550.930359][T18117] holtek 0003:1241:5015.0026: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 1550.941906][T18117] holtek 0003:1241:5015.0026: no output report found [ 1551.072089][T27495] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1551.086054][T15822] usb 6-1: USB disconnect, device number 32 [ 1551.442215][T27495] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1551.450579][T27495] usb 2-1: config 0 has no interface number 0 [ 1551.457069][T27495] usb 2-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1551.467931][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1551.479707][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1551.491070][T27495] usb 2-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1551.504316][T27495] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1551.513589][T27495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.523274][T27495] usb 2-1: config 0 descriptor?? [ 1551.567576][T27495] iowarrior 2-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior4 [ 1551.764288][ T362] imon:display_open: could not find interface for minor 0 [ 1551.774871][T18117] usb 2-1: USB disconnect, device number 30 [ 1551.783363][T18117] iowarrior 2-1:0.135: I/O-Warror #4 now disconnected [ 1551.852414][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.858595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1551.864778][T27495] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1551.932418][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.938467][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1551.945000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.951082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1551.957564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.963652][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1551.969825][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.976037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1552.112100][T27495] usb 6-1: Using ep0 maxpacket: 8 [ 1552.242259][T27495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.253639][T27495] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1552.266658][T27495] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 1552.275848][T27495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.287744][T27495] usb 6-1: config 0 descriptor?? [ 1552.585028][T27495] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 1552.592339][T27495] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 1552.599532][T27495] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 1552.606868][T27495] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 1552.614138][T27495] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 1552.621247][T27495] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 1552.630155][T27495] holtek 0003:1241:5015.0027: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 1552.641471][T27495] holtek 0003:1241:5015.0027: no output report found [ 1552.718746][T18117] usb 6-1: USB disconnect, device number 33 09:59:23 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x300) close(r0) socket$kcm(0xa, 0x40122000080003, 0x11) sendmsg(r0, &(0x7f0000001bc0)={&(0x7f0000001340)=@un=@abs, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x70f000) 09:59:23 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5, 0x59d, 0x0, {0x0, 0x7530}, {0x0, 0x2710}, {0x0, 0x0, 0x3}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c20001"}}, 0x48}}, 0x0) 09:59:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000000000001000001000000000000000000000004"]) 09:59:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5}) 09:59:23 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, 0x0}}], 0x30) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc05c5340, &(0x7f0000dc5f98)) 09:59:23 executing program 1: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 09:59:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000080)={0xff2d, 0x0}) 09:59:24 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4) 09:59:24 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @rand_addr=0x10a}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0xfc, 0x0, @loopback}], 0x1c) 09:59:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 09:59:24 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8038, 0x0) [ 1556.172372][T27495] usb 2-1: new high-speed USB device number 31 using dummy_hcd 09:59:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 1556.582711][T27495] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1556.591016][T27495] usb 2-1: config 0 has no interface number 0 [ 1556.597464][T27495] usb 2-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1556.608290][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1556.620103][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1556.631467][T27495] usb 2-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1556.644733][T27495] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1556.654016][T27495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.663689][T27495] usb 2-1: config 0 descriptor?? [ 1556.707715][T27495] iowarrior 2-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior4 [ 1556.910025][ T377] imon:display_open: could not find interface for minor 0 [ 1556.920219][T18117] usb 2-1: USB disconnect, device number 31 [ 1556.928862][T18117] iowarrior 2-1:0.135: I/O-Warror #4 now disconnected 09:59:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0xffffdd86}]}]}, 0x24}}, 0x0) 09:59:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000005000000840000000000000095001300000000002660520d73509b3b3c5957ca20211f0056579e72b68397f1573bfe9c0b16bec4258300000000000000029362be24fc60a598c0e393c82372fd0405fb934cc65209003439e7397714c0cbb597fe71fc6886ff327165f4ba372508393fcb881b42b63ec72304362495833aa514c1e8cc9bd32f2f3cdecec53a251cfe810d95c3e72db931f309fcc4617b2ad796d60000000018882adf1893314351051efd3a0000000000100000000000000000c9892ffc50b60a9ae043b4c64f2238e2f0847fb9fa044e6e3438473153a339bb0c8c35cf5bbeaee0674348891a466068665d07000000000000009207a56518710ffc401119243bfd2259fd171bace3a4c0911bf2023cc367f5652106393f796a939e8ca04a6c2e8070df8027bad90ebe6efbc6816a9312fff66a0c5411b4375e81be62f133221b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x8000fffffffe) 09:59:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000000c0)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{HS\x00\xd8\x1fl\xfd\vk\xbf\x83\x16m\xca\x0e\xa6\xe2#\x9a\xe5\xc0\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2}\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:59:28 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x8000fffffffe) 09:59:29 executing program 3: futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040), 0x0, 0x0) 09:59:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) [ 1561.165787][ T520] imon:display_open: could not find interface for minor 0 [ 1561.176623][T27495] usb 2-1: USB disconnect, device number 32 [ 1561.188949][T27495] iowarrior 2-1:0.135: I/O-Warror #4 now disconnected 09:59:29 executing program 1: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1562.076846][T27495] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1562.452283][T27495] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1562.460643][T27495] usb 2-1: config 0 has no interface number 0 [ 1562.466994][T27495] usb 2-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1562.477805][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1562.489495][T27495] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1562.500915][T27495] usb 2-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1562.514181][T27495] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1562.523388][T27495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.533240][T27495] usb 2-1: config 0 descriptor?? [ 1562.587562][T27495] iowarrior 2-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior4 [ 1562.794519][ T567] imon:display_open: could not find interface for minor 0 [ 1562.804184][T27495] usb 2-1: USB disconnect, device number 33 [ 1562.811724][T27495] iowarrior 2-1:0.135: I/O-Warror #4 now disconnected 09:59:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 09:59:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 09:59:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f00000002c0)=[{0xffffff81, 0x8, 0x0, 0x0, @tick, {}, {}, @raw8={"6cb155b736f8653747ce5b05"}}], 0x30) 09:59:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'veth0_to_bon\x00', 0x3002}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x303) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1010306) close(r0) 09:59:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x8000fffffffe) 09:59:35 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x1400}) 09:59:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r3, 0x0, 0x20000000006) 09:59:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2b, 0x0, 0x108) 09:59:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x25, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x28}}, 0x0) 09:59:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2b, 0x0, 0x108) 09:59:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100000000000000}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x9f}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed6}, 0x48) 09:59:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x25, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x28}}, 0x0) 09:59:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 09:59:43 executing program 3: io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) dup2(r2, r1) 09:59:43 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xff, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "00000000000000000000000001000080"}, @md5sig={0x13, 0x12, "eaaab4d0ceb3a8d98f5d9ffd47fdc19a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 09:59:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2b, 0x0, 0x108) 09:59:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x25, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x28}}, 0x0) 09:59:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x8000fffffffe) [ 1575.070745][ T728] net_ratelimit: 5 callbacks suppressed [ 1575.070777][ T728] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2b, 0x0, 0x108) 09:59:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x25, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x28}}, 0x0) [ 1575.210234][ T814] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) 09:59:43 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcc, &(0x7f0000000000), 0x3c) 09:59:43 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xff, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "00000000000000000000000001000080"}, @md5sig={0x13, 0x12, "eaaab4d0ceb3a8d98f5d9ffd47fdc19a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 09:59:43 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f0000000180), 0x21c, 0x0) [ 1575.576214][ T858] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 09:59:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) 09:59:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 09:59:47 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xff, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "00000000000000000000000001000080"}, @md5sig={0x13, 0x12, "eaaab4d0ceb3a8d98f5d9ffd47fdc19a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 09:59:47 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setpriority(0x1, 0x0, 0xffffffffffffff80) 09:59:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) [ 1579.367014][ T975] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:47 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a6472abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d0", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x7}, 0xfffffffffffffccd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 09:59:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) 09:59:47 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xff, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "00000000000000000000000001000080"}, @md5sig={0x13, 0x12, "eaaab4d0ceb3a8d98f5d9ffd47fdc19a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 09:59:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) 09:59:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) 09:59:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1579.641177][ T1100] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 09:59:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 09:59:53 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xc3, 0x38, 0x5e, 0x8, 0x2040, 0x9301, 0x4ff2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x72, 0x0, 0x0, 0xc9, 0xb, 0xf5}}]}}]}}, 0x0) 09:59:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'.\x00\x00\x00\x00\x00\xe4\xff\xff\xff\xff\xff\xff\xff\x05\x00', 0x3}) [ 1585.754337][ T1235] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1585.763180][ T1235] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 1585.791437][ T1233] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:53 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 09:59:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}]}, 0x110) [ 1585.828582][ T1241] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 09:59:54 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x8, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000006c0)=ANY=[@ANYBLOB="9499"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:59:54 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7266ba7f"}, 0x0, 0x0, @offset, 0x4}) 09:59:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1586.052214][T25327] usb 4-1: new high-speed USB device number 54 using dummy_hcd 09:59:54 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0x20015290}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2) [ 1586.292137][T25327] usb 4-1: Using ep0 maxpacket: 8 [ 1586.412541][T25327] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1586.420799][T25327] usb 4-1: config 0 has no interface number 0 [ 1586.427300][T25327] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=4f.f2 [ 1586.436555][T25327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.454065][T25327] usb 4-1: config 0 descriptor?? [ 1586.497054][T25327] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1586.505482][T25327] dvb-usb: bulk message failed: -22 (3/0) [ 1586.516319][T25327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1586.547880][T25327] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1586.556278][T25327] usb 4-1: media controller created [ 1586.561679][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1586.568813][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1586.575313][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1586.581723][T25327] dvb-usb: MAC address: 00:0d:fe:2c:2c:2c [ 1586.617120][T25327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.644888][T25327] dvb-usb: bulk message failed: -22 (6/-30592) [ 1586.651369][T25327] dvb-usb: bulk message failed: -22 (6/-30592) [ 1586.658139][T25327] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1586.713734][T25327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input104 [ 1586.727552][T25327] dvb-usb: schedule remote query interval to 100 msecs. [ 1586.734957][T25327] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1586.748204][T25327] usb 4-1: USB disconnect, device number 54 [ 1586.861186][T25327] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1587.462191][T25327] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1587.702122][T25327] usb 4-1: Using ep0 maxpacket: 8 [ 1587.822243][T25327] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1587.830557][T25327] usb 4-1: config 0 has no interface number 0 [ 1587.837002][T25327] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=4f.f2 [ 1587.846221][T25327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.858039][T25327] usb 4-1: config 0 descriptor?? [ 1587.906552][T25327] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1587.914538][T25327] dvb-usb: bulk message failed: -22 (3/0) [ 1587.925044][T25327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1587.952706][T25327] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1587.960952][T25327] usb 4-1: media controller created [ 1587.966534][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1587.973174][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1587.979531][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1587.986466][T25327] dvb-usb: MAC address: 00:0d:fe:23:23:23 [ 1588.017498][T25327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1588.044192][T25327] dvb-usb: bulk message failed: -22 (6/-30592) [ 1588.050748][T25327] dvb-usb: bulk message failed: -22 (6/-30592) [ 1588.057293][T25327] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1588.103405][T25327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input105 [ 1588.120540][T25327] dvb-usb: schedule remote query interval to 100 msecs. [ 1588.127814][T25327] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1588.142824][T25327] usb 4-1: USB disconnect, device number 55 [ 1588.249048][T25327] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. 09:59:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 09:59:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:59:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x28}, @IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x15, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 09:59:58 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xc3, 0x38, 0x5e, 0x8, 0x2040, 0x9301, 0x4ff2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x72, 0x0, 0x0, 0xc9, 0xb, 0xf5}}]}}]}}, 0x0) 09:59:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 09:59:58 executing program 0: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000080)) r0 = socket(0xa, 0x802, 0x80000000088) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffe15, 0x0}}], 0x183, 0x0, 0x0) [ 1590.147317][ T1289] l2tp_ppp: tunl 4: set debug=464c457f [ 1590.148913][ T1292] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1590.178861][ T771] l2tp_core: tunl 4: closing all sessions... 09:59:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:59:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xb}) [ 1590.212263][ C1] l2tp_core: tunl 4: closing... 09:59:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) sendmsg$tipc(r1, &(0x7f0000003600)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10, 0x0}, 0x0) 09:59:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') io_setup(0x2000000000d30, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1590.415766][T27495] usb 4-1: new high-speed USB device number 56 using dummy_hcd 09:59:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:59:58 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9e, 0x0, &(0x7f0000000000)) 09:59:58 executing program 4: socket$bt_hidp(0x1f, 0x3, 0x6) 09:59:58 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 09:59:58 executing program 5: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)='x', 0x1, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r0}, &(0x7f0000000600)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'md4-generic\x00'}}) [ 1590.672248][T27495] usb 4-1: Using ep0 maxpacket: 8 [ 1590.806077][T27495] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1590.814456][T27495] usb 4-1: config 0 has no interface number 0 [ 1590.820690][T27495] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=4f.f2 [ 1590.829960][T27495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.866796][T27495] usb 4-1: config 0 descriptor?? [ 1590.926706][T27495] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1590.934584][T27495] dvb-usb: bulk message failed: -22 (3/0) [ 1590.945610][T27495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1590.973426][T27495] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1590.981603][T27495] usb 4-1: media controller created [ 1590.987876][T27495] dvb-usb: bulk message failed: -22 (5/-30592) [ 1590.994481][T27495] dvb-usb: bulk message failed: -22 (5/-30592) [ 1591.000836][T27495] dvb-usb: bulk message failed: -22 (5/-30592) [ 1591.007372][T27495] dvb-usb: MAC address: 00:0d:fe:a0:a0:a0 [ 1591.038986][T27495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1591.066152][T27495] dvb-usb: bulk message failed: -22 (6/-30592) [ 1591.072865][T27495] dvb-usb: bulk message failed: -22 (6/-30592) [ 1591.079141][T27495] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1591.124428][T27495] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input106 [ 1591.137611][T27495] dvb-usb: schedule remote query interval to 100 msecs. [ 1591.144840][T27495] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1591.157128][T27495] usb 4-1: USB disconnect, device number 56 [ 1591.268353][T27495] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. 09:59:59 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xc3, 0x38, 0x5e, 0x8, 0x2040, 0x9301, 0x4ff2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x72, 0x0, 0x0, 0xc9, 0xb, 0xf5}}]}}]}}, 0x0) [ 1591.982272][T27495] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1592.232176][T27495] usb 4-1: Using ep0 maxpacket: 8 [ 1592.362313][T27495] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1592.370668][T27495] usb 4-1: config 0 has no interface number 0 [ 1592.377088][T27495] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=4f.f2 [ 1592.386262][T27495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.396133][T27495] usb 4-1: config 0 descriptor?? [ 1592.436322][T27495] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1592.444372][T27495] dvb-usb: bulk message failed: -22 (3/0) [ 1592.455949][T27495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1592.493032][T27495] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1592.501319][T27495] usb 4-1: media controller created [ 1592.507265][T27495] dvb-usb: bulk message failed: -22 (5/-30592) [ 1592.513983][T27495] dvb-usb: bulk message failed: -22 (5/-30592) [ 1592.520336][T27495] dvb-usb: bulk message failed: -22 (5/-30592) [ 1592.526743][T27495] dvb-usb: MAC address: 00:0d:fe:a2:a2:a2 [ 1592.559878][T27495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1592.586747][T27495] dvb-usb: bulk message failed: -22 (6/-30592) [ 1592.593422][T27495] dvb-usb: bulk message failed: -22 (6/-30592) [ 1592.599773][T27495] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1592.643743][T27495] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input107 [ 1592.656840][T27495] dvb-usb: schedule remote query interval to 100 msecs. [ 1592.663985][T27495] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1592.678791][T27495] usb 4-1: USB disconnect, device number 57 [ 1592.780001][T27495] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. 10:00:01 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 10:00:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff30}, 0x48) 10:00:07 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 10:00:07 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x12, 0x0, 0x0, r0, 0x0}]) 10:00:07 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) 10:00:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 10:00:07 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xc3, 0x38, 0x5e, 0x8, 0x2040, 0x9301, 0x4ff2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x72, 0x0, 0x0, 0xc9, 0xb, 0xf5}}]}}]}}, 0x0) 10:00:07 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x400008f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0x138, 0x138, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, 0x0, {[{{@ipv6={@rand_addr="2e491c6e8b8278ed9974598630d50b06", @remote, [], [], 'veth0_to_team\x00', 'nlmon0\x00'}, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1691c495cbcd02d3cf9055882478cbd1a2e80132ed5e38668e87068a7ea94216135ecf1e1fa86eb484b930e2c2fd891c8b50dfe02440a52c447795f7af92ad4b"}}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x29a, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 10:00:07 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 10:00:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}}, {{&(0x7f0000000400)=@ethernet={0x0, @link_local}, 0x80, 0x0}}], 0x2, 0x0) 10:00:07 executing program 5: unshare(0x20400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000327000/0x3000)=nil, 0x3000}}) 10:00:07 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x400008f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0x138, 0x138, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, 0x0, {[{{@ipv6={@rand_addr="2e491c6e8b8278ed9974598630d50b06", @remote, [], [], 'veth0_to_team\x00', 'nlmon0\x00'}, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1691c495cbcd02d3cf9055882478cbd1a2e80132ed5e38668e87068a7ea94216135ecf1e1fa86eb484b930e2c2fd891c8b50dfe02440a52c447795f7af92ad4b"}}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x29a, 0x0}}], 0x4000000000000ac, 0x43, 0x0) [ 1599.732168][T25327] usb 4-1: new high-speed USB device number 58 using dummy_hcd 10:00:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000140)="f2748ba79354d36f"}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 10:00:07 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x48c, 0x0) close(r2) [ 1599.957993][ T1385] dccp_close: ABORT with 1061 bytes unread [ 1599.972308][T25327] usb 4-1: Using ep0 maxpacket: 8 [ 1599.982426][ T1385] dccp_close: ABORT with 1061 bytes unread [ 1600.094936][T25327] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1600.103730][T25327] usb 4-1: config 0 has no interface number 0 [ 1600.109985][T25327] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=4f.f2 [ 1600.119289][T25327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.130578][T25327] usb 4-1: config 0 descriptor?? [ 1600.176417][T25327] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1600.184906][T25327] dvb-usb: bulk message failed: -22 (3/0) [ 1600.204830][T25327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1600.232715][T25327] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1600.240957][T25327] usb 4-1: media controller created [ 1600.246580][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1600.253739][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1600.260205][T25327] dvb-usb: bulk message failed: -22 (5/-30592) [ 1600.266678][T25327] dvb-usb: MAC address: 00:0d:fe:2b:2b:2b [ 1600.296469][T25327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.323165][T25327] dvb-usb: bulk message failed: -22 (6/-30592) [ 1600.329645][T25327] dvb-usb: bulk message failed: -22 (6/-30592) [ 1600.336117][T25327] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1600.384695][T25327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input108 [ 1600.401760][T25327] dvb-usb: schedule remote query interval to 100 msecs. [ 1600.408927][T25327] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1600.422116][T25327] usb 4-1: USB disconnect, device number 58 [ 1600.546716][T25327] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. 10:00:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 10:00:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x23, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 10:00:13 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x400008f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0x138, 0x138, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, 0x0, {[{{@ipv6={@rand_addr="2e491c6e8b8278ed9974598630d50b06", @remote, [], [], 'veth0_to_team\x00', 'nlmon0\x00'}, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1691c495cbcd02d3cf9055882478cbd1a2e80132ed5e38668e87068a7ea94216135ecf1e1fa86eb484b930e2c2fd891c8b50dfe02440a52c447795f7af92ad4b"}}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x29a, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 10:00:13 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x48c, 0x0) close(r2) 10:00:13 executing program 2: r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000080)='noMand\x00', 0x0, 0x0) 10:00:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1605.829187][ T1403] dccp_close: ABORT with 1061 bytes unread 10:00:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x23, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 10:00:13 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x48c, 0x0) close(r2) 10:00:13 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x400008f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0x138, 0x138, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, 0x0, {[{{@ipv6={@rand_addr="2e491c6e8b8278ed9974598630d50b06", @remote, [], [], 'veth0_to_team\x00', 'nlmon0\x00'}, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1691c495cbcd02d3cf9055882478cbd1a2e80132ed5e38668e87068a7ea94216135ecf1e1fa86eb484b930e2c2fd891c8b50dfe02440a52c447795f7af92ad4b"}}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x29a, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 10:00:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080080005d0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000022c0)=ANY=[@ANYBLOB="1f000000000d1300000000000000010000e4e6fc4be790f80a1f000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={0x0, 0x0, 0x465, {}, [], "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", "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"}) 10:00:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) 10:00:14 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 1606.166329][ T1421] dccp_close: ABORT with 1061 bytes unread [ 1606.297837][ T1435] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1606.555735][ T1435] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 10:00:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) 10:00:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080080005d0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000022c0)=ANY=[@ANYBLOB="1f000000000d1300000000000000010000e4e6fc4be790f80a1f000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={0x0, 0x0, 0x465, {}, [], "feafd86f691776d9335a91f69d5c77fd8c9019044e437ba0b3534ae689855e62ef8636b343987aa5eed84932576321bf974c4789892e70e24383ab7c5ca285688ee78609102b848c22c7d44dbec2c77898067cb5e65fb948909d34ff99dbd6c845823bc1e8986e6255a6e694fd50bb1d7766ce23abf260ad25ed8022db4e46b50527e8668a11eb67fbd3194ce70a8a39e7ebbeb3192439f2a31db24f4632f7515b62eee61541031bf50bb303471f0a3d9e13bd7640313d8d70bef614b0bcb32b469642f9912853e0bffccdb978ba57409749a1f241c1c1fb252f12f925ea83ab01b1a3699f2a8a862edc8861434e5bb8d6d8380303c247e9ca4c9ea06dd23f5712af70dc085d482e6c89d718cd56cd2f47f403d24daf17ce01b30110fa3e5ca358db74c0ba768352f77c6f930a76a373c87c237f52c286005d81cece10bfb5bccea3b4ba818efdf907b1203f707c4bcaa19402720022163b5c6f83ec784f8c0944974804ce4d14bc492a2228141ab62bf55055531f919ee9f58892f8169b04b7eb7a55f59fbba5da3ac9af77cb8df5872e330c4de3e15547f77df67086e87188ca3192de55fd4d0bc9447c4768a123439e0c35c2d103296f05a7929e52b36bead050cfdfec280b949cf47179e1d12c6ffee4e29eb39460a71cca0d73f777299a053525ee84a2af02e7bd50d2c7b4c15741a59eba7daf79df4600139e0dc06269aea44bac8550300eff0f98cf215dd9a0a4c63cfb748cd4697efbb6980798d5a9da9b7ed5c51f2e6b1742f5748573f395f4e43c46afc2e7feae1b282d74f1626afc43651e552830a31b9896ad001ae22a67afab6fca068d8e44d94941fd3a824a797a036b8a76fb4996ed652148f04c18995e9c97474aeec7109410abae737ca5b12c0398eb99368cc13ebaea5c375b9b043304df24109ee85de6460b1950f6836fb43c1c78676d780ecccbb5334d610a8e47e6793d0f46dea8fe4315223f6968c6dace1e5a3f657e15eb3b8fef0dd0e3509e737ad14cd531811c174dc728873197e64a6daf9ffc5b7b3516f47d82b11085c3e93f12be955220990c9705bf051cb92f8bb3fc81cb6febfa035abd17fe017c6b1b8bdec3dea1cdf523498cd4882036e6bfcd23c86c93654bb42f535ed96cf27b8dc096871a539a2a3c1b5e081ff447984edb71394815da377c6c7bcfaa3843344769e09d12fbf0b939037f4071f5dad78bb4cc1335fa171cf11698cb69c93e7d4c511ba145fdfd97fe605fa593a4f40d1e560dca9de5447f281b2251e64422d5ab565b7299940d900dcaaa11f4293eb9ed856d2209a5997d25b688651b981871273c3e8ea2c9e792b84305bf57a6a1d64bb5c752cc9008cb265830d96b5fb81b2eedb0f9285a07a8e3512bf3c4bc5ea594133676260ffb3093e2dabcafb564a3332d4e05e7f4d972a69dddef0a7b4118a23f3c60c95f969de074382802a429eff15cb625f0d0167e98550e2901ce514c4b07b4ea577b953e6e051ab8448604198573628470895e72bfaba67cf9dea2186a1263468a0110ebfc03d01f5f609ae552cc8aea188f15edd5892dde3959dd8ee1ccba10ac120a88895a6158e016bb17d20040a07cb4f5ceb4f9af6d754465bd521270490c5c3ff30b83d3523b88893154ce19f4c84b016dac9c0d84bbe38888f3017f8b16b52ca43d0ee58c3c5cd9ea28b78cfab04e7fe3bf23f00ab094121bdcb2b339d839b74cb3013351d8f0043d6d9300b519dc241977d5cbac7f1d8bbbb41986e785ea99c2923f88868fc9ef6284b823d45f84f5413cad33d1401e69a1bfac95bb7ef6c0a528daeb3ff998c32892e04f823f725ddab303b4a190c87ff70e4c9c1ca405bc520d8863df0c526dc5c61d53891bd897ad8c362da2eadb6d4e8634135ee0ecbf75673d2e578c7ea28c577dd0f898aa9b1c8201c2d53c199025984e4d555a048a194892a12bdfb5c5f81abf8f98b27a082dd1152eea7817fd7be4f6c9ac34e1ffaafd075788d967bff27ee9998b9ca7867b0e698cf2468220d80dc6076209a2837dda286bb7bdff18cff1d39f9187066e65a8bc4f56821733659ef5cbc1f5c76a71f957ef5ad4ee115f6df754f837d5d0b6ad12a7c7f6cdfe23947b5e9d9b5e5b4c349926b2f1a2f237110f8c207b937ba78d3c517cb0ce82dde7f1db2d7af9021bf8c4134e69588f91defd3b3884658979e92e9a42e59a6f0fdd59321b12483d8432e3dd1f0148e4ade4be45c477acaea0a3397b289c6af801d9fd947a9916092b9066f3dc574e7ea07cd43afb52ba5e6612442c38d3ce9744cb93dd99582f487c91ba2ac57a650982824f743e267182226e57bba3fa31021000cea9e71448b87733ecce72707d3082ef467b39369254bf56a38451677c802a04e12f238dad92837fde89ec53e06873a497b020f11f9058070706a5109b8ef99cace44ba3918ef7bf0a152f6c3d2e0665de954775eb961f6aa8c4649e39ac6471dd41605477c9dc3a8065e24f80ff53f2ad6f27e99ccb08e9411ee295792ae539919ba2d5a737b8b672c98dd889b8ab9574ec8b7bfadcc13fe8cec3e37c746c43913713713cb23d7b1c7f7333ead8dda2dd0e4cf73761b459fe905d3c8d0499c76ba5cbaf106f40e02cc00af18ccc7cbafcd2f3ff8e5845d8c43834fbc1f03e4d118fb8f1135f8740fe8425d197f629251b161d0cb509fb80465cba8efa5c17cf1f6b1944e2c390aad236c8f667f6c92d5458c5c0abf544ad608eb84edeccb7b702a55b25f508bcfc84fb10d00908d7a7d4dac8ce28ca158542b4c506e40600c1f1ed0b247b38d9eaa933e65bd593a8b92c4596c5abbf5f0deef48d4769b913fd2f8bca2975959327c2319ecc5d2b2b4d0b68de08dbf2d745c673ab6570580c19f90f79ca6c1aa53055f9dce1ad491cb9d82222a8440de07505c94ca50cef57a06035e253e66bd6192e42a2b2f5dbe164978a6ee941f25f4f22e47641320e6c58007ba9aa5384964e80b081ff2fc416a8548c205e2ab8fd7d31a970d87469b46e952a4ced01aa500aec12a28c8b52ce3b8849141e7b8c49b5db416ac040a6d48257362965493a3cde5d665e0373a741d615e3e2c5f28267c926fad332ee69cfc6c1cef1dcc9d685aba13de607cd7f488bf1fdf816845b1a0128bccedf674ed36b856e32f716a55cd0af082f2a0f66894f362f147ca79ea730a64d2d175de69377621359de7e23f24cdb61650b78eca85a7869c15d7e34eb37ab13981a4c88300c7d2ef58b9b5e72b6cfb3c78bcde3fca4ca1901985ac522ad37fa09776fa6e6c99e24c6b4373cccea8a353589d313553636a7abcde906d57fde92e0dc5f5a4dbfa5f8dfe5b21d2ce0b40534f64086001ac7286545755b6dd86c6246fb2a14fea744f662c896e36f6f47bf82fa911ffe285b21a647c9c2e939d9aff61e01f79660739cbb51d1b80765354f7455981d49b191a32e60c7fe933b6ebaa3eb080c6fac7ce093f3353262938930ec5fff6a23cc98b5cd80340faf49e4d538a7f70bcc5a1aaaef0b760c9c19854d8d65d69173ef81a27be8011125a22c6a9729862735a8bb4f73f640374979676e43950d2613e7cf28d404d4c3d053db93af43d72fa3abffd48eb7653a316f32bce3a123242f04e745fd1e55b0e3b46b94b9ab91cda5ee92d63e7cd033b0cbe11e55df0a1860120e35e97274974abbde187d9f43e71084c100d121627d2d98b07c5e3e078aa758278301bad88a63f354606aa44e4da0fa2a40f2d25f1b8cc2d14844f34447ced6ca679fa6d57659753993648fe9e8bf5f5e3e748db2a0dc177c7b62ecf9e35b2eebe286fc4331082a4aac90a76305754a2d3a4d81e45d4d14ecf0bad2b01eb4c3399d3fbdac32b0943cfa0960c9b4d9b9f6e5a2cf2a84199c5c8661c4fac64755a42fc96b97bfc2775aef0dce0caa13ca26aa08c5233ef083088a6e0ad1c7fe4a8c9d156679a7016f733aa131feddedd4b6c1049ddb596f7190c19b7cc21fba95a9f7ea1312803b592c019c4bf0f78fb5731a3d13c3b28092bd9abfc9121b1ddc1ea653e51b776456190e35b2c59e90c3266714689566e3251d4423f58beb4189ed835e4f564eb4d9ab4897abc7379725871d0e9c194b4132a71beb37884bf16b132cd84c9781c9c4bcdbc0b49a2a106cfa911bd6e3a261e4aa6e1d38a23f1ff6070a0b5e93881fbaaa5d58c14646a20126cac8391a7011bd2f7ea2d12d64203c72927fc3dd5236b97632ebe4e7aec6f9ba9b65d5a11ba2f754bff59a7fc8dc35da9d2d6c9214bdf34b53a463bb9027baf15f809a239e24f7c6cf44a6eb555ca46e540bcfc3b67a5f3dac76761641747a2b1f914b98dc3a8aa05f9aa19c22a9868a844138ad8ba35346c96892888f7ad54099026020af99c0a7ba6772dc63e61157ee023e25e854adfd54c446f147c3d82b929d931d64f1cbc55ca443d9d98660ebfa6ce82c66babeb9cc87fb252f96415d7c3ac38a87bee7958feabacff63c7e6a843b644cfc00adc760c77d052d39834151a8a980474daae212bbcaccfa3d1ea1e4048f6e2d5e40fc280e601fb3c3e1f7d82b6edbc020cf36089c5f4bed9eca842785a1c47e63661d9922f11fce5e4a7d6464dfdf69140802bb262f2bb585906059423b4cfa90db8bb84edf833f273b734f2adf0c6e2b3a6fae3f9e4617be129d775cc4cb2cc86fa45776a8ab619f89dfbcd6f02c10ca664ff87e2695cb04ad186add3d7d49717784a9c0635576dba06c2c546cbdc727ffdaa88d6259cfe41f0509049a1fe226f3b0b589741df02e0cbc5fb3257d166b5d386b5e960ef0924f7641f8163a1ed46506678ea321c6ae3d21ef9847429cd84a7f54494a1ae0c5403848904d43c5e1ebe831dadab15fabb098a798ff17cd8fbd48862ad9992309572a9437c421e59e66b918c481695dbd6385b54d99f651537b84201e9a4c613cb064552881bd8f99cc18ceb46397e31325e793c49fec05b00a8209d1ab3d1039727656b1fc61a82ed1e3c26fc05a3b217f227b3025ddadde3b4aa8f1f01ea2362e457fadbd682c28d697c76f85e4e819e5dd65b07734dde9f8ed4629a30dcb9e111c5f7fb34262ca41983adc65d55bc4bf497d407e591f40c5367a44402c31abb63e9999e6807bba73527e0c49f2808ad57e85a3283944daedc2f55b74c979959c61c82f77dcf775a909aee175d7826abe6f088c90f275a875c5a1082bc5cb4c38c2632845d3e5ef1f14e8e7d2d995b605d93ba9b0fcdc8689a650a4b73e9871039f9be6bee86c7b8c120ccd1c215cfb35e9c727542912b164c35d5c9e5af0bda85ef29e7900b0100d480c1c43cae3a29a2d9f18b2097b762f5c03898459d3617daa23f8109becb3786b4987d6d876947bc41fff3143ae5311e39f8d3cbb985ac364260b9e533beedb63580910a4e1832d0670ed897e89fc5fdf3326bb7383b29d0c630675f598430791103848726c161b76813e5f1d576acdfdbe6a081b5aec24198bb98c78eafacb7d8559c87f536c1f066878a654acb52921921d5261b192274ddb4a6f5402b37e45399d07d66903745837b85b88a75dc4a288d57641dc3083284c450ada63ec2d1f85055da1a16cb86516d0e50cfae5cac8a24a40a1bdb4bb0eddd5c89223d0363f2fc4c1a76ca42e6353c064d454c9b3f870a2db0cb4ac7277e1dd6272fe78b7cb51007d64082dde98f639e015d9fb9062915636248f23dbe2bded5c78ea675f6136de3be40584f92542220fde2ba9fbff962320f9e2cebe0ffbe42117e2150c29a820f799", "79b2c001f0a7b773fc81f25572e192e8822ff2aa181856152d9396be9e86a99a31d002f37ba6a2c61063bb7659abde8d71277da0084b284e906c7fc5443dda0ea049b1973a562544746f75776bb581b29eb426e1d27c824cf09017013b7a96708dfe527e4c3dfaa1c56fddabd2747b20d3d8eafabe53e9f6ff7eeeaad2059b790169ca9f291a2923a764c5318f4d57aa51fefc5160c66e3849d4ec3dc02c933341b2050f0d6d11932b9aa48d3b3c0805f692ca9d5b49fed362d9e67a5e77721b7a0472d0d71a733d58d47cc648b140ef42c03b0cc605f80f78496430ccda95fc168c6eea39fe740daf05ee1cd3550923950c000a7b59b7bb08ccb3457df517b886374f0d34c847d96a86467ae756215ad2172bc0b100b4ff7f18c5bd38147bbf889be2fb268f48b218b717f091ff0454bd2ae19edf2e1e0e10983994edee26a3ac7159c14e5b5d0cee1ea93a5d9e003f34abe805d32931899d7d801a59efe388228c3da56acedc617f164c8a85ee18a3d39473471690448bb1feb74f17e98ff1a1123708512921e6b569870905be2ab405baf5428924e6a6a8002c4584fb6c5e13caa551fd15ef8fca66264dee5354e00e8b215911c1eb57cdc9a27af73eb1613dafee5345b90ea05c375027568ffa9b67c00e4c34c44892c25e311e67b46aa50612a64707abd0c0b2c28a05ee8095a3d9ec54000d0935b33c73c6958878846c765671d45e450daf2caba8bff929688f9a649ac10bac7f122a6b03ab821535ba500bf84199ad901691d64fe94c5bef5e7d75f75ae68defa9e9f7f2fbf516f92996e03ac0c989291ea533b83376bbad369e919270a4646887b40e1543b3587e7af1f5add9ac8a9c2d0b90d2f2fbebd866b8153756bec0e409f515d4ea112f884a74d687eeedb95655ee6d7410faf67601181fb240547a78b153342ecb46dfcdcbfeb6513098af695b151e7898fa06ad0b123aab77ce8061df20e26862c885c3e2df60096e970b63b0c6aa7575ee725f853a27aaada72eb00d1e4ae2232df109fb04315f38675de8eff6878fc06bbf5fbca40263060e75e419959e004b3281b4d756dffb626d1f9d614ee10101d2917e7bfe41f3cc1e5c196f89132507376c45e2930c3571dc7ee9d8e6a7314c5dc305787b8b18be4792bc0960f5061bc3e15706eaeb5f30595b9b9eaed714c551fe398e3697eab61a814532eb587836298e74336ded9ec638eb3dd20dfb89fd99d4b350911db55fda60891b45d04d0b0676ab60019a105ee60672fdc00c0666ea158346745574661d0cc866ed280161fe2199237272e0019bb18666cffc6f8b69461e0276e7bc2459c93806d89538d187de8fd0984fdf1646aae2e1f66c6dee50e028977652a820ffdc9714ae7df98d5e7e630098722ffbd7c8156577a653e7e158a60eb6fa74e95c4e0491f023cc14bcd81d72874953611cfd05af7fbcebef9e8662c26277390d2459766a2bf05bf84084f3bb2aed9539862dfc75a7da3a7b963207ada3a15969362411ab3618c69901c8690b8a21d3206a17536fcceafbf49c598531f33fec6d3a8e0ed712756d9d3ed56bb0e5a76c49fc273171dd93177260911d0e9707afaa72b8fe683e10a70b13cf8e035c895f4f0c6a771af294ba9966f6d528d5f8f5f7ebd5af5bf4b308fc7de43f1a26ae163df0472a6d9aa65c771cac5738b404e2846503383b75e54022e4e8c010f724c068aff6f74397ab8834bd5f4447e5cfa59dd62bb4d8f7cb577e1dd92a9c6dfe4195da56318682228ef383d47f7c204bb284764f79689aa57199c7af23a4c5072b0c99c6a91ab068bbc71a6ae42fac33c121e27edd2591e71eb474626941236ce6d11887093c14a0654a6b9f0a2de3d49a3c67363b1bbf8afd686d9f2d0cde02d9c0c71f140833c6d8315860840d0dee28e2964e30e80dcc352d765031db11efa25a8cd8f05cb814773f2ebc516af2d8748ba51597ba85039a4fdea573b01acc798b295c91e510705d04cf18470a8f7548a6e2c874d70ff8b07e7bbefdbf1435294e5286735e33087959fbb67375b1116430be357915c513dd850590dfc42552cb1a70a3d64536fee3daf79739522dad839ac938113d14e4b68fab68c045e1f62d8ba3492874e5fd324293a01f9ef2e2655ea2a2bd1faf83838d151df7f1ee004c4d35fcb649650a31dbe0e6b19a8c812c84d6d1cc82b0e83943a5a93a7c7f8c4908ccc45fd492fed56e949cfadf94cb8de5adb09cb7ba0e2dc4c8cfa0a29f12d071047d9cb2c11372dfc013ade30653ec360fccb0042cffda950a76d20c57614f44df9bfdb0a4f9bcd4b4d91294534bfcc6b303421b4d140db8c422777b578811fbb8a28b3e95c07f3081e65216517436b0b03a07c8fdd6095ecc3824d22b6296b2be353740c20aed4cd700f0f0ff00a363dd615e86d4a0a5b72f6667581d1d5a6058efa756a9dd853d16229f77ccd4fc3ed36e0b1456dd0af7a9869a95dc8cfd8f05405203d1ce7e1d858091953ed6ee196153a51c28edf9af27d2ba454d081f55a6cd0f57c60bfba0396c55acf6d185b2516d372c2fa52d15c3a1f6a9be4ce9db7ace15632d381df6a3eaf0204b24292033809c56a0e97cf348bf3967ded661673bdf361eda4801b199484bc0ed519746c17ee6375733ad398ee3b872eb316085fcb8e7606ce8c7f4ffeea57f3f188331c2bdc08e98c3ad30361d1b36003a1c154dbc4057bbb35e7858ce505a50f2c47931f3be4bc99228ecd0aff231192b35fecfc4433a8ed60862be514532c053442c00ef1d450cf738649c09dc02dfa15b2f3bcdbd179a4ce0d47380d15a3191a80076efaa2c5a432c64e28ad3ba434660259a64531b84b4e2d90ff1902a0b2433df57791862fc814cfadc8340a6cb672541a0d4b1d824a147f4669a486c57b239de8a1fe2d56ba390013119317bfec1ecf55528b36e2a127f24adfdf4235641e7b2148c0b2a48e4c8c85f632fd21679b0cd6a5bf58154d22c1094675d2b4a43350309f8fee5a25ed616cf913a3ac13a9fcc4378c74b41890e8d1f407d44f418b63657c93a9749a62b6c9e3a6b240b89214ff62192528d6e3242cd30fdaf018e1fc9c5e974fa65e9772747f870ef6d2064c9f6cea6805e3b71e8007d93f984066244ca80c86f3a686b12d8915d9c930f9824c7fd9fc23ec9cbec3daf9d304ddc670e337ee90b2ca704a4f6ebfc28e2438c61a2012e3fecd974ae4b34a1252e7af61060a12c51f28e12ae1234c4bb8da1d6f1148fb9da6ceace24facd7340a66eca03a2ff5b8679ca58775bcef36589b11392ce31768cb2f1e0a724d090fd50fbffbf64613d0a4b350a29ab4892d0b053d0ecf36790dcf8c6024d48f1f96da90592112010781d6f4d8253e24fadab346998dbd01950c5f09dfe1083253d300c46ecf13a7ba5f6f16e9ed22f15e93b91ddf431056d2d68d0669ccf568f5ab74935a955cf9378323c09617a010698db8662f55ba8fb084f43679a107093b95e4104672647dd05feb30b7400ccb8f07f2be48b5ffcb1e13457015d6b017e119cb517415ae2888c3886ecf9020a58e59e6a69f1b5cb73d5a4be8b205c7246464c1ba7bdbe54604df8d115c5445d3d66ba516378c6d5a3dcba27faf0d1005766840fd2ced7e032d5c6d1a54e6b2dd7d053e1019e06d06016f5d2599eccf82c2825f732b18981785ed0d0df55c331f78ad344b0219923b77cc2be2d0f191b3b729ef5e33328660bc98d5e45c0dfd18997c5d5ce4633e6d2e99dbeb642e8ee2abb045d6e4823fbb3eebb68819e3029b4a03cf2f83c4219ede9cf0971934bd02339407d789008be1097754d982ffc3386617130fa0214b1c415cc056819f6e15f32e21fbc65ff54a7e1aaad197e69a2aacd7a98e1d1aa9f0e284787c299944049fde497e11be32837492bda826efca56ca31d25d766377c74db19a6b82ec7320808e72c8933b69e406e3b8d35b36755e336b46d8070b38dfbe0ab3343fec6c2f037eac1b3a742479d131623930dc9635df4fa94a7f695d580f5138f9d918c1acb071d2f4910d184ba6b439dd6fe95b8f4550a688493538bb0b84ba9448da0f8d31cb94d3ac1823b50086f50d1dc214edff7ff40ccd448b720e636772c69bbad44c93e339fd2e83241596267172e9db7e29045b570001654713fa0ac4929c201b9b2f038f2b7a0a356f73505139b3e9462f3e9944d65846f4eed903c4fe678ed2cf40a76c30c232429e1841a87bcfc458f0a664cb7973618a46cd147ac29018edfdbd9c184d30b2544051ab62595c8aa2a858ec28b132050569f19917752c58b0023ed52cf2d36caf5a7172308332fcecbe48f4921e5dcb2a68fb1a3284623fa0f4178b9d4a6b79092f994b7a844ca7fb36f62cf4d12a4f428d26a1881fe0f4774faaa11d502d91e61b87bff899f9ce50069718721fedb455a5e29cebe3371dcff4070b12543e8b4d8a88a606f89ebde5e8e6d1cc6019626180a306941a2dc79b46307d10ea3b57b8de7b7dbc69797937d98ab40d2a5a34949372bbb06e326cadf07887767fa818fb2420f80020d5aba8c8df6a05a8cdb582019b662142db67a0601e9ccc775cc9039db4cd5fd2fb70185f1c9d9bdf6f2f60dc7a03b5c70aa27009368d594da92e90660d553e6dc53b62e1bcdd2fec6ecf90f140f8c497165ebe36a02075394d131e8ccecb2c174854bec7254e755e3defadfc2ac803dfe148e00ad034baf20398393513ccb2191e8cdc889da5a8a7f46c6b9da8057503c84147c980744ea303bdb3d53aded867da47bea912082780d7e4ef97b5e342d50d2a4ede895fbbad89d1cb395ec5f8126895412b3aef022d9d0e39584dccd5e354cdb15494f21c4084833392e2ec4770a05396daef8afc8a4783570a077556d52b2629a9ac8f450a42a5db48cd502b99b9c1a1fea700c0abb853247fdeb540da3052ed645db3161dcc72b618f69873f367b95720541b5a10f2dec766f53793eb8dcfccbc32569aba528344f6f2fb769fa278cb84549d8d5ab2f0429a70c1f7ca9de0c691f54bf899f6a43f1441923278805c8dfccfe506cd703201e78083c993962b23ff7e817f4780708dc64dc333c3943a49867fabbe2e539ddf06599e8f52320c8a9a24b5e2d95a58accd490a5ec19e6ae9a0b5b92580b81927b57e5253f4b09a59fd8e4efafaed774f5109e66675c1e9d887c31b7e0968a43ab653814a6a52098968a6c8297d96a63dc2a3b841228b4004b78189c3469fc7006a347b0c286517a3418c0cdb1a1c2d9edeca000f40937b3cb0c21e9f22ce984bcde5b94352a779b5b8f9c9550f3705ddad15e5bdef98164bc4462a132f803df3692f9aa291baf30f97ad75058578abad42e4b1911d64b59947603f70f4fee716c7a2b359b8fc4079440bdb0d2573be24639280f2cd7646a9960bfae4c64f88a5ca7a72e50dd030ccac899c5c638673dfc6a4e056b513be7a409d1a60de76e14cf7c9f39a4e7604438013c8f9675cf3f3ec6b980c548da4fe476744a25198eb49edb60d9175204ca199d12ae27293c695e680aa699c597f517f4c039d38ea9b736a190db657ceb1f4b8cc8e0d81a1a1e95e8305aa68f73e92270e4f601dda0243d5c818cc1963d319852bd03cc70453ac3b491cd2e67023c0c549b38da30f0bb554c20ce51c6ae259b6108dcc28f489d1aa83eddbabf7f8a4e0980be6f20d605e1b79fbc902ad597ad0b6527aa7b2c3c0e645670b52f551ddff1299ff4d08cfb5b4b83b96cc338e6f45c6a549c39aca3fe427ce5d037aae4f2044d"}) 10:00:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 10:00:21 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x48c, 0x0) close(r2) 10:00:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="003e6b0b4f65a99fe4a5ea4c0000161711d90920515e0000020000000007e9ff088cdf6d1e4833bb98394cc3003b3c04"], 0x30) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0xea) dup2(r3, r2) 10:00:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x23, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 1613.024978][ T1448] dccp_close: ABORT with 1061 bytes unread 10:00:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x23, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 10:00:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080080005d0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000022c0)=ANY=[@ANYBLOB="1f000000000d1300000000000000010000e4e6fc4be790f80a1f000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={0x0, 0x0, 0x465, {}, [], "feafd86f691776d9335a91f69d5c77fd8c9019044e437ba0b3534ae689855e62ef8636b343987aa5eed84932576321bf974c4789892e70e24383ab7c5ca285688ee78609102b848c22c7d44dbec2c77898067cb5e65fb948909d34ff99dbd6c845823bc1e8986e6255a6e694fd50bb1d7766ce23abf260ad25ed8022db4e46b50527e8668a11eb67fbd3194ce70a8a39e7ebbeb3192439f2a31db24f4632f7515b62eee61541031bf50bb303471f0a3d9e13bd7640313d8d70bef614b0bcb32b469642f9912853e0bffccdb978ba57409749a1f241c1c1fb252f12f925ea83ab01b1a3699f2a8a862edc8861434e5bb8d6d8380303c247e9ca4c9ea06dd23f5712af70dc085d482e6c89d718cd56cd2f47f403d24daf17ce01b30110fa3e5ca358db74c0ba768352f77c6f930a76a373c87c237f52c286005d81cece10bfb5bccea3b4ba818efdf907b1203f707c4bcaa19402720022163b5c6f83ec784f8c0944974804ce4d14bc492a2228141ab62bf55055531f919ee9f58892f8169b04b7eb7a55f59fbba5da3ac9af77cb8df5872e330c4de3e15547f77df67086e87188ca3192de55fd4d0bc9447c4768a123439e0c35c2d103296f05a7929e52b36bead050cfdfec280b949cf47179e1d12c6ffee4e29eb39460a71cca0d73f777299a053525ee84a2af02e7bd50d2c7b4c15741a59eba7daf79df4600139e0dc06269aea44bac8550300eff0f98cf215dd9a0a4c63cfb748cd4697efbb6980798d5a9da9b7ed5c51f2e6b1742f5748573f395f4e43c46afc2e7feae1b282d74f1626afc43651e552830a31b9896ad001ae22a67afab6fca068d8e44d94941fd3a824a797a036b8a76fb4996ed652148f04c18995e9c97474aeec7109410abae737ca5b12c0398eb99368cc13ebaea5c375b9b043304df24109ee85de6460b1950f6836fb43c1c78676d780ecccbb5334d610a8e47e6793d0f46dea8fe4315223f6968c6dace1e5a3f657e15eb3b8fef0dd0e3509e737ad14cd531811c174dc728873197e64a6daf9ffc5b7b3516f47d82b11085c3e93f12be955220990c9705bf051cb92f8bb3fc81cb6febfa035abd17fe017c6b1b8bdec3dea1cdf523498cd4882036e6bfcd23c86c93654bb42f535ed96cf27b8dc096871a539a2a3c1b5e081ff447984edb71394815da377c6c7bcfaa3843344769e09d12fbf0b939037f4071f5dad78bb4cc1335fa171cf11698cb69c93e7d4c511ba145fdfd97fe605fa593a4f40d1e560dca9de5447f281b2251e64422d5ab565b7299940d900dcaaa11f4293eb9ed856d2209a5997d25b688651b981871273c3e8ea2c9e792b84305bf57a6a1d64bb5c752cc9008cb265830d96b5fb81b2eedb0f9285a07a8e3512bf3c4bc5ea594133676260ffb3093e2dabcafb564a3332d4e05e7f4d972a69dddef0a7b4118a23f3c60c95f969de074382802a429eff15cb625f0d0167e98550e2901ce514c4b07b4ea577b953e6e051ab8448604198573628470895e72bfaba67cf9dea2186a1263468a0110ebfc03d01f5f609ae552cc8aea188f15edd5892dde3959dd8ee1ccba10ac120a88895a6158e016bb17d20040a07cb4f5ceb4f9af6d754465bd521270490c5c3ff30b83d3523b88893154ce19f4c84b016dac9c0d84bbe38888f3017f8b16b52ca43d0ee58c3c5cd9ea28b78cfab04e7fe3bf23f00ab094121bdcb2b339d839b74cb3013351d8f0043d6d9300b519dc241977d5cbac7f1d8bbbb41986e785ea99c2923f88868fc9ef6284b823d45f84f5413cad33d1401e69a1bfac95bb7ef6c0a528daeb3ff998c32892e04f823f725ddab303b4a190c87ff70e4c9c1ca405bc520d8863df0c526dc5c61d53891bd897ad8c362da2eadb6d4e8634135ee0ecbf75673d2e578c7ea28c577dd0f898aa9b1c8201c2d53c199025984e4d555a048a194892a12bdfb5c5f81abf8f98b27a082dd1152eea7817fd7be4f6c9ac34e1ffaafd075788d967bff27ee9998b9ca7867b0e698cf2468220d80dc6076209a2837dda286bb7bdff18cff1d39f9187066e65a8bc4f56821733659ef5cbc1f5c76a71f957ef5ad4ee115f6df754f837d5d0b6ad12a7c7f6cdfe23947b5e9d9b5e5b4c349926b2f1a2f237110f8c207b937ba78d3c517cb0ce82dde7f1db2d7af9021bf8c4134e69588f91defd3b3884658979e92e9a42e59a6f0fdd59321b12483d8432e3dd1f0148e4ade4be45c477acaea0a3397b289c6af801d9fd947a9916092b9066f3dc574e7ea07cd43afb52ba5e6612442c38d3ce9744cb93dd99582f487c91ba2ac57a650982824f743e267182226e57bba3fa31021000cea9e71448b87733ecce72707d3082ef467b39369254bf56a38451677c802a04e12f238dad92837fde89ec53e06873a497b020f11f9058070706a5109b8ef99cace44ba3918ef7bf0a152f6c3d2e0665de954775eb961f6aa8c4649e39ac6471dd41605477c9dc3a8065e24f80ff53f2ad6f27e99ccb08e9411ee295792ae539919ba2d5a737b8b672c98dd889b8ab9574ec8b7bfadcc13fe8cec3e37c746c43913713713cb23d7b1c7f7333ead8dda2dd0e4cf73761b459fe905d3c8d0499c76ba5cbaf106f40e02cc00af18ccc7cbafcd2f3ff8e5845d8c43834fbc1f03e4d118fb8f1135f8740fe8425d197f629251b161d0cb509fb80465cba8efa5c17cf1f6b1944e2c390aad236c8f667f6c92d5458c5c0abf544ad608eb84edeccb7b702a55b25f508bcfc84fb10d00908d7a7d4dac8ce28ca158542b4c506e40600c1f1ed0b247b38d9eaa933e65bd593a8b92c4596c5abbf5f0deef48d4769b913fd2f8bca2975959327c2319ecc5d2b2b4d0b68de08dbf2d745c673ab6570580c19f90f79ca6c1aa53055f9dce1ad491cb9d82222a8440de07505c94ca50cef57a06035e253e66bd6192e42a2b2f5dbe164978a6ee941f25f4f22e47641320e6c58007ba9aa5384964e80b081ff2fc416a8548c205e2ab8fd7d31a970d87469b46e952a4ced01aa500aec12a28c8b52ce3b8849141e7b8c49b5db416ac040a6d48257362965493a3cde5d665e0373a741d615e3e2c5f28267c926fad332ee69cfc6c1cef1dcc9d685aba13de607cd7f488bf1fdf816845b1a0128bccedf674ed36b856e32f716a55cd0af082f2a0f66894f362f147ca79ea730a64d2d175de69377621359de7e23f24cdb61650b78eca85a7869c15d7e34eb37ab13981a4c88300c7d2ef58b9b5e72b6cfb3c78bcde3fca4ca1901985ac522ad37fa09776fa6e6c99e24c6b4373cccea8a353589d313553636a7abcde906d57fde92e0dc5f5a4dbfa5f8dfe5b21d2ce0b40534f64086001ac7286545755b6dd86c6246fb2a14fea744f662c896e36f6f47bf82fa911ffe285b21a647c9c2e939d9aff61e01f79660739cbb51d1b80765354f7455981d49b191a32e60c7fe933b6ebaa3eb080c6fac7ce093f3353262938930ec5fff6a23cc98b5cd80340faf49e4d538a7f70bcc5a1aaaef0b760c9c19854d8d65d69173ef81a27be8011125a22c6a9729862735a8bb4f73f640374979676e43950d2613e7cf28d404d4c3d053db93af43d72fa3abffd48eb7653a316f32bce3a123242f04e745fd1e55b0e3b46b94b9ab91cda5ee92d63e7cd033b0cbe11e55df0a1860120e35e97274974abbde187d9f43e71084c100d121627d2d98b07c5e3e078aa758278301bad88a63f354606aa44e4da0fa2a40f2d25f1b8cc2d14844f34447ced6ca679fa6d57659753993648fe9e8bf5f5e3e748db2a0dc177c7b62ecf9e35b2eebe286fc4331082a4aac90a76305754a2d3a4d81e45d4d14ecf0bad2b01eb4c3399d3fbdac32b0943cfa0960c9b4d9b9f6e5a2cf2a84199c5c8661c4fac64755a42fc96b97bfc2775aef0dce0caa13ca26aa08c5233ef083088a6e0ad1c7fe4a8c9d156679a7016f733aa131feddedd4b6c1049ddb596f7190c19b7cc21fba95a9f7ea1312803b592c019c4bf0f78fb5731a3d13c3b28092bd9abfc9121b1ddc1ea653e51b776456190e35b2c59e90c3266714689566e3251d4423f58beb4189ed835e4f564eb4d9ab4897abc7379725871d0e9c194b4132a71beb37884bf16b132cd84c9781c9c4bcdbc0b49a2a106cfa911bd6e3a261e4aa6e1d38a23f1ff6070a0b5e93881fbaaa5d58c14646a20126cac8391a7011bd2f7ea2d12d64203c72927fc3dd5236b97632ebe4e7aec6f9ba9b65d5a11ba2f754bff59a7fc8dc35da9d2d6c9214bdf34b53a463bb9027baf15f809a239e24f7c6cf44a6eb555ca46e540bcfc3b67a5f3dac76761641747a2b1f914b98dc3a8aa05f9aa19c22a9868a844138ad8ba35346c96892888f7ad54099026020af99c0a7ba6772dc63e61157ee023e25e854adfd54c446f147c3d82b929d931d64f1cbc55ca443d9d98660ebfa6ce82c66babeb9cc87fb252f96415d7c3ac38a87bee7958feabacff63c7e6a843b644cfc00adc760c77d052d39834151a8a980474daae212bbcaccfa3d1ea1e4048f6e2d5e40fc280e601fb3c3e1f7d82b6edbc020cf36089c5f4bed9eca842785a1c47e63661d9922f11fce5e4a7d6464dfdf69140802bb262f2bb585906059423b4cfa90db8bb84edf833f273b734f2adf0c6e2b3a6fae3f9e4617be129d775cc4cb2cc86fa45776a8ab619f89dfbcd6f02c10ca664ff87e2695cb04ad186add3d7d49717784a9c0635576dba06c2c546cbdc727ffdaa88d6259cfe41f0509049a1fe226f3b0b589741df02e0cbc5fb3257d166b5d386b5e960ef0924f7641f8163a1ed46506678ea321c6ae3d21ef9847429cd84a7f54494a1ae0c5403848904d43c5e1ebe831dadab15fabb098a798ff17cd8fbd48862ad9992309572a9437c421e59e66b918c481695dbd6385b54d99f651537b84201e9a4c613cb064552881bd8f99cc18ceb46397e31325e793c49fec05b00a8209d1ab3d1039727656b1fc61a82ed1e3c26fc05a3b217f227b3025ddadde3b4aa8f1f01ea2362e457fadbd682c28d697c76f85e4e819e5dd65b07734dde9f8ed4629a30dcb9e111c5f7fb34262ca41983adc65d55bc4bf497d407e591f40c5367a44402c31abb63e9999e6807bba73527e0c49f2808ad57e85a3283944daedc2f55b74c979959c61c82f77dcf775a909aee175d7826abe6f088c90f275a875c5a1082bc5cb4c38c2632845d3e5ef1f14e8e7d2d995b605d93ba9b0fcdc8689a650a4b73e9871039f9be6bee86c7b8c120ccd1c215cfb35e9c727542912b164c35d5c9e5af0bda85ef29e7900b0100d480c1c43cae3a29a2d9f18b2097b762f5c03898459d3617daa23f8109becb3786b4987d6d876947bc41fff3143ae5311e39f8d3cbb985ac364260b9e533beedb63580910a4e1832d0670ed897e89fc5fdf3326bb7383b29d0c630675f598430791103848726c161b76813e5f1d576acdfdbe6a081b5aec24198bb98c78eafacb7d8559c87f536c1f066878a654acb52921921d5261b192274ddb4a6f5402b37e45399d07d66903745837b85b88a75dc4a288d57641dc3083284c450ada63ec2d1f85055da1a16cb86516d0e50cfae5cac8a24a40a1bdb4bb0eddd5c89223d0363f2fc4c1a76ca42e6353c064d454c9b3f870a2db0cb4ac7277e1dd6272fe78b7cb51007d64082dde98f639e015d9fb9062915636248f23dbe2bded5c78ea675f6136de3be40584f92542220fde2ba9fbff962320f9e2cebe0ffbe42117e2150c29a820f799", "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"}) 10:00:21 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000001a008100a00f80ecdb4cb9040a4865160b000000d4126efb120019403a7d0020e20031d44d65f94bd929", 0x2e}], 0x1}, 0x0) 10:00:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) 10:00:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080080005d0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000022c0)=ANY=[@ANYBLOB="1f000000000d1300000000000000010000e4e6fc4be790f80a1f000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={0x0, 0x0, 0x465, {}, [], "feafd86f691776d9335a91f69d5c77fd8c9019044e437ba0b3534ae689855e62ef8636b343987aa5eed84932576321bf974c4789892e70e24383ab7c5ca285688ee78609102b848c22c7d44dbec2c77898067cb5e65fb948909d34ff99dbd6c845823bc1e8986e6255a6e694fd50bb1d7766ce23abf260ad25ed8022db4e46b50527e8668a11eb67fbd3194ce70a8a39e7ebbeb3192439f2a31db24f4632f7515b62eee61541031bf50bb303471f0a3d9e13bd7640313d8d70bef614b0bcb32b469642f9912853e0bffccdb978ba57409749a1f241c1c1fb252f12f925ea83ab01b1a3699f2a8a862edc8861434e5bb8d6d8380303c247e9ca4c9ea06dd23f5712af70dc085d482e6c89d718cd56cd2f47f403d24daf17ce01b30110fa3e5ca358db74c0ba768352f77c6f930a76a373c87c237f52c286005d81cece10bfb5bccea3b4ba818efdf907b1203f707c4bcaa19402720022163b5c6f83ec784f8c0944974804ce4d14bc492a2228141ab62bf55055531f919ee9f58892f8169b04b7eb7a55f59fbba5da3ac9af77cb8df5872e330c4de3e15547f77df67086e87188ca3192de55fd4d0bc9447c4768a123439e0c35c2d103296f05a7929e52b36bead050cfdfec280b949cf47179e1d12c6ffee4e29eb39460a71cca0d73f777299a053525ee84a2af02e7bd50d2c7b4c15741a59eba7daf79df4600139e0dc06269aea44bac8550300eff0f98cf215dd9a0a4c63cfb748cd4697efbb6980798d5a9da9b7ed5c51f2e6b1742f5748573f395f4e43c46afc2e7feae1b282d74f1626afc43651e552830a31b9896ad001ae22a67afab6fca068d8e44d94941fd3a824a797a036b8a76fb4996ed652148f04c18995e9c97474aeec7109410abae737ca5b12c0398eb99368cc13ebaea5c375b9b043304df24109ee85de6460b1950f6836fb43c1c78676d780ecccbb5334d610a8e47e6793d0f46dea8fe4315223f6968c6dace1e5a3f657e15eb3b8fef0dd0e3509e737ad14cd531811c174dc728873197e64a6daf9ffc5b7b3516f47d82b11085c3e93f12be955220990c9705bf051cb92f8bb3fc81cb6febfa035abd17fe017c6b1b8bdec3dea1cdf523498cd4882036e6bfcd23c86c93654bb42f535ed96cf27b8dc096871a539a2a3c1b5e081ff447984edb71394815da377c6c7bcfaa3843344769e09d12fbf0b939037f4071f5dad78bb4cc1335fa171cf11698cb69c93e7d4c511ba145fdfd97fe605fa593a4f40d1e560dca9de5447f281b2251e64422d5ab565b7299940d900dcaaa11f4293eb9ed856d2209a5997d25b688651b981871273c3e8ea2c9e792b84305bf57a6a1d64bb5c752cc9008cb265830d96b5fb81b2eedb0f9285a07a8e3512bf3c4bc5ea594133676260ffb3093e2dabcafb564a3332d4e05e7f4d972a69dddef0a7b4118a23f3c60c95f969de074382802a429eff15cb625f0d0167e98550e2901ce514c4b07b4ea577b953e6e051ab8448604198573628470895e72bfaba67cf9dea2186a1263468a0110ebfc03d01f5f609ae552cc8aea188f15edd5892dde3959dd8ee1ccba10ac120a88895a6158e016bb17d20040a07cb4f5ceb4f9af6d754465bd521270490c5c3ff30b83d3523b88893154ce19f4c84b016dac9c0d84bbe38888f3017f8b16b52ca43d0ee58c3c5cd9ea28b78cfab04e7fe3bf23f00ab094121bdcb2b339d839b74cb3013351d8f0043d6d9300b519dc241977d5cbac7f1d8bbbb41986e785ea99c2923f88868fc9ef6284b823d45f84f5413cad33d1401e69a1bfac95bb7ef6c0a528daeb3ff998c32892e04f823f725ddab303b4a190c87ff70e4c9c1ca405bc520d8863df0c526dc5c61d53891bd897ad8c362da2eadb6d4e8634135ee0ecbf75673d2e578c7ea28c577dd0f898aa9b1c8201c2d53c199025984e4d555a048a194892a12bdfb5c5f81abf8f98b27a082dd1152eea7817fd7be4f6c9ac34e1ffaafd075788d967bff27ee9998b9ca7867b0e698cf2468220d80dc6076209a2837dda286bb7bdff18cff1d39f9187066e65a8bc4f56821733659ef5cbc1f5c76a71f957ef5ad4ee115f6df754f837d5d0b6ad12a7c7f6cdfe23947b5e9d9b5e5b4c349926b2f1a2f237110f8c207b937ba78d3c517cb0ce82dde7f1db2d7af9021bf8c4134e69588f91defd3b3884658979e92e9a42e59a6f0fdd59321b12483d8432e3dd1f0148e4ade4be45c477acaea0a3397b289c6af801d9fd947a9916092b9066f3dc574e7ea07cd43afb52ba5e6612442c38d3ce9744cb93dd99582f487c91ba2ac57a650982824f743e267182226e57bba3fa31021000cea9e71448b87733ecce72707d3082ef467b39369254bf56a38451677c802a04e12f238dad92837fde89ec53e06873a497b020f11f9058070706a5109b8ef99cace44ba3918ef7bf0a152f6c3d2e0665de954775eb961f6aa8c4649e39ac6471dd41605477c9dc3a8065e24f80ff53f2ad6f27e99ccb08e9411ee295792ae539919ba2d5a737b8b672c98dd889b8ab9574ec8b7bfadcc13fe8cec3e37c746c43913713713cb23d7b1c7f7333ead8dda2dd0e4cf73761b459fe905d3c8d0499c76ba5cbaf106f40e02cc00af18ccc7cbafcd2f3ff8e5845d8c43834fbc1f03e4d118fb8f1135f8740fe8425d197f629251b161d0cb509fb80465cba8efa5c17cf1f6b1944e2c390aad236c8f667f6c92d5458c5c0abf544ad608eb84edeccb7b702a55b25f508bcfc84fb10d00908d7a7d4dac8ce28ca158542b4c506e40600c1f1ed0b247b38d9eaa933e65bd593a8b92c4596c5abbf5f0deef48d4769b913fd2f8bca2975959327c2319ecc5d2b2b4d0b68de08dbf2d745c673ab6570580c19f90f79ca6c1aa53055f9dce1ad491cb9d82222a8440de07505c94ca50cef57a06035e253e66bd6192e42a2b2f5dbe164978a6ee941f25f4f22e47641320e6c58007ba9aa5384964e80b081ff2fc416a8548c205e2ab8fd7d31a970d87469b46e952a4ced01aa500aec12a28c8b52ce3b8849141e7b8c49b5db416ac040a6d48257362965493a3cde5d665e0373a741d615e3e2c5f28267c926fad332ee69cfc6c1cef1dcc9d685aba13de607cd7f488bf1fdf816845b1a0128bccedf674ed36b856e32f716a55cd0af082f2a0f66894f362f147ca79ea730a64d2d175de69377621359de7e23f24cdb61650b78eca85a7869c15d7e34eb37ab13981a4c88300c7d2ef58b9b5e72b6cfb3c78bcde3fca4ca1901985ac522ad37fa09776fa6e6c99e24c6b4373cccea8a353589d313553636a7abcde906d57fde92e0dc5f5a4dbfa5f8dfe5b21d2ce0b40534f64086001ac7286545755b6dd86c6246fb2a14fea744f662c896e36f6f47bf82fa911ffe285b21a647c9c2e939d9aff61e01f79660739cbb51d1b80765354f7455981d49b191a32e60c7fe933b6ebaa3eb080c6fac7ce093f3353262938930ec5fff6a23cc98b5cd80340faf49e4d538a7f70bcc5a1aaaef0b760c9c19854d8d65d69173ef81a27be8011125a22c6a9729862735a8bb4f73f640374979676e43950d2613e7cf28d404d4c3d053db93af43d72fa3abffd48eb7653a316f32bce3a123242f04e745fd1e55b0e3b46b94b9ab91cda5ee92d63e7cd033b0cbe11e55df0a1860120e35e97274974abbde187d9f43e71084c100d121627d2d98b07c5e3e078aa758278301bad88a63f354606aa44e4da0fa2a40f2d25f1b8cc2d14844f34447ced6ca679fa6d57659753993648fe9e8bf5f5e3e748db2a0dc177c7b62ecf9e35b2eebe286fc4331082a4aac90a76305754a2d3a4d81e45d4d14ecf0bad2b01eb4c3399d3fbdac32b0943cfa0960c9b4d9b9f6e5a2cf2a84199c5c8661c4fac64755a42fc96b97bfc2775aef0dce0caa13ca26aa08c5233ef083088a6e0ad1c7fe4a8c9d156679a7016f733aa131feddedd4b6c1049ddb596f7190c19b7cc21fba95a9f7ea1312803b592c019c4bf0f78fb5731a3d13c3b28092bd9abfc9121b1ddc1ea653e51b776456190e35b2c59e90c3266714689566e3251d4423f58beb4189ed835e4f564eb4d9ab4897abc7379725871d0e9c194b4132a71beb37884bf16b132cd84c9781c9c4bcdbc0b49a2a106cfa911bd6e3a261e4aa6e1d38a23f1ff6070a0b5e93881fbaaa5d58c14646a20126cac8391a7011bd2f7ea2d12d64203c72927fc3dd5236b97632ebe4e7aec6f9ba9b65d5a11ba2f754bff59a7fc8dc35da9d2d6c9214bdf34b53a463bb9027baf15f809a239e24f7c6cf44a6eb555ca46e540bcfc3b67a5f3dac76761641747a2b1f914b98dc3a8aa05f9aa19c22a9868a844138ad8ba35346c96892888f7ad54099026020af99c0a7ba6772dc63e61157ee023e25e854adfd54c446f147c3d82b929d931d64f1cbc55ca443d9d98660ebfa6ce82c66babeb9cc87fb252f96415d7c3ac38a87bee7958feabacff63c7e6a843b644cfc00adc760c77d052d39834151a8a980474daae212bbcaccfa3d1ea1e4048f6e2d5e40fc280e601fb3c3e1f7d82b6edbc020cf36089c5f4bed9eca842785a1c47e63661d9922f11fce5e4a7d6464dfdf69140802bb262f2bb585906059423b4cfa90db8bb84edf833f273b734f2adf0c6e2b3a6fae3f9e4617be129d775cc4cb2cc86fa45776a8ab619f89dfbcd6f02c10ca664ff87e2695cb04ad186add3d7d49717784a9c0635576dba06c2c546cbdc727ffdaa88d6259cfe41f0509049a1fe226f3b0b589741df02e0cbc5fb3257d166b5d386b5e960ef0924f7641f8163a1ed46506678ea321c6ae3d21ef9847429cd84a7f54494a1ae0c5403848904d43c5e1ebe831dadab15fabb098a798ff17cd8fbd48862ad9992309572a9437c421e59e66b918c481695dbd6385b54d99f651537b84201e9a4c613cb064552881bd8f99cc18ceb46397e31325e793c49fec05b00a8209d1ab3d1039727656b1fc61a82ed1e3c26fc05a3b217f227b3025ddadde3b4aa8f1f01ea2362e457fadbd682c28d697c76f85e4e819e5dd65b07734dde9f8ed4629a30dcb9e111c5f7fb34262ca41983adc65d55bc4bf497d407e591f40c5367a44402c31abb63e9999e6807bba73527e0c49f2808ad57e85a3283944daedc2f55b74c979959c61c82f77dcf775a909aee175d7826abe6f088c90f275a875c5a1082bc5cb4c38c2632845d3e5ef1f14e8e7d2d995b605d93ba9b0fcdc8689a650a4b73e9871039f9be6bee86c7b8c120ccd1c215cfb35e9c727542912b164c35d5c9e5af0bda85ef29e7900b0100d480c1c43cae3a29a2d9f18b2097b762f5c03898459d3617daa23f8109becb3786b4987d6d876947bc41fff3143ae5311e39f8d3cbb985ac364260b9e533beedb63580910a4e1832d0670ed897e89fc5fdf3326bb7383b29d0c630675f598430791103848726c161b76813e5f1d576acdfdbe6a081b5aec24198bb98c78eafacb7d8559c87f536c1f066878a654acb52921921d5261b192274ddb4a6f5402b37e45399d07d66903745837b85b88a75dc4a288d57641dc3083284c450ada63ec2d1f85055da1a16cb86516d0e50cfae5cac8a24a40a1bdb4bb0eddd5c89223d0363f2fc4c1a76ca42e6353c064d454c9b3f870a2db0cb4ac7277e1dd6272fe78b7cb51007d64082dde98f639e015d9fb9062915636248f23dbe2bded5c78ea675f6136de3be40584f92542220fde2ba9fbff962320f9e2cebe0ffbe42117e2150c29a820f799", "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"}) 10:00:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000b707000001000000487000000000001dbc700000000000009500000000000000e994d48078a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c870cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621bb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcf5b54affa3c68b08a7d6e12c11fc8d2f2bb852caebe7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5e087849dd83ffd83dd80ce9b7037af58426117b1371453b214c0b4846131c2a0c3baf80a92d5a671457159e175e169fa847bbe2778bc003dfec63182259ce46865867e70639262f3ebd07b2418b5457d52e5ef2abc0fc805e9edd58914d489ec9ad2db9ca920d11601bf621e4973da2359efc0ee6df93907a03a5e7c2df61eb6ce803c648f392d0b5986495df177110cc6028c20c9f6b9eb1d16bc3ef9413f8ed7b47b4bad063fd6ccc773eef6a57a9b3940055390dcaa20e5d32cbe71d4ee"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) [ 1613.454568][ T1571] netlink: 'syz-executor.4': attribute type 25 has an invalid length. 10:00:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) [ 1613.802912][T27495] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1614.072203][T27495] usb 4-1: Using ep0 maxpacket: 8 [ 1614.192320][T27495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.203461][T27495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1614.216488][T27495] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 1614.225802][T27495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.235672][T27495] usb 4-1: config 0 descriptor?? [ 1614.952438][T27495] usb 4-1: string descriptor 0 read error: -71 [ 1614.982505][T27495] uclogic 0003:5543:004D.0028: failed retrieving string descriptor #200: -71 [ 1614.991433][T27495] uclogic 0003:5543:004D.0028: failed retrieving pen parameters: -71 [ 1614.999877][T27495] uclogic 0003:5543:004D.0028: failed probing pen v2 parameters: -71 [ 1615.008205][T27495] uclogic 0003:5543:004D.0028: failed probing parameters: -71 [ 1615.016026][T27495] uclogic: probe of 0003:5543:004D.0028 failed with error -71 [ 1615.026703][T27495] usb 4-1: USB disconnect, device number 59 [ 1615.682155][T25327] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1615.922128][T25327] usb 4-1: Using ep0 maxpacket: 8 [ 1616.042311][T25327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.053358][T25327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1616.066465][T25327] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 1616.075666][T25327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.085381][T25327] usb 4-1: config 0 descriptor?? [ 1616.442395][T25327] usbhid 4-1:0.0: can't add hid device: -71 [ 1616.448478][T25327] usbhid: probe of 4-1:0.0 failed with error -71 [ 1616.457663][T25327] usb 4-1: USB disconnect, device number 60 10:00:28 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100000000000000040000000000000020000000", @ANYRES32, @ANYBLOB="08000000e27790f5f956cd5dcbb7fbded85d09f85e7aec2ae1b09d5cab209b4a8ce60f3e42f6454a33d850c4e060927fb7cae3966b0960f6213e18b42f2b9dfe1971e04dddd75effbc1970e635f2ea713bd3d72829bed50e1fc5ce4871e0c5573f9f06a872590b66191a013685d98d12593b51019422f59663b3eae72506dfba6a8b01da26633acb9c6b00", @ANYRES32=0x0, @ANYBLOB="74000000000000002080020000000000"], 0x1c, 0x2) mkdir(&(0x7f0000000000)='./file1/file0\x00', 0x0) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) 10:00:28 executing program 0: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x2972, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 10:00:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa20) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 10:00:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000001000000000000400000000040000000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 10:00:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x49, 0x1], [0xc1]}) 10:00:28 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 10:00:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x22, 0x2, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) 10:00:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xf, 0x0, 0xab, 0xfa, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:00:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) 10:00:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 10:00:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') getdents64(r0, &(0x7f0000000000)=""/53, 0xfe77) 10:00:28 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 10:00:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xf, 0x0, 0xab, 0xfa, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1620.603582][ T1785] kvm: pic: single mode not supported 10:00:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000000000)="fd", 0x1) 10:00:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x9}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x18, &(0x7f0000000280)={r1}, 0x8) 10:00:34 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socket$kcm(0x11, 0xa, 0x300) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 10:00:34 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 10:00:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x48, 0x21, 0x20, 0x17ef, 0x7203, 0xc682, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x87, 0x81, 0x4e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:00:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xf, 0x0, 0xab, 0xfa, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1620.948960][ T1852] kvm: pic: single mode not supported 10:00:34 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 10:00:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x2) 10:00:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xf, 0x0, 0xab, 0xfa, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1626.726650][ T1865] kvm: pic: single mode not supported 10:00:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1, 0x7, 0x203, 0x0, 0x0, {}, [@nested={0x8, 0x7, [@typed={0x4, 0x1}]}]}, 0x1c}}, 0x0) [ 1626.964278][T25327] usb 2-1: new high-speed USB device number 34 using dummy_hcd 10:00:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) close(r2) close(r1) [ 1627.034832][ T1885] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:00:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1, 0x7, 0x203, 0x0, 0x0, {}, [@nested={0x8, 0x7, [@typed={0x4, 0x1}]}]}, 0x1c}}, 0x0) [ 1627.037172][ T1883] kvm: pic: single mode not supported [ 1627.224155][T25327] usb 2-1: Using ep0 maxpacket: 32 [ 1627.261388][ T1895] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1627.379100][T25327] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1627.387712][T25327] usb 2-1: config 0 has no interface number 0 [ 1627.394080][T25327] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 1627.403304][T25327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.412942][T25327] usb 2-1: config 0 descriptor?? [ 1628.122535][T25327] asix 2-1:0.84 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1628.982771][T25327] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1628.993224][T25327] asix: probe of 2-1:0.84 failed with error -71 [ 1629.009054][T25327] usb 2-1: USB disconnect, device number 34 [ 1629.742138][T25327] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1629.982256][T25327] usb 2-1: Using ep0 maxpacket: 32 [ 1630.102317][T25327] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1630.110496][T25327] usb 2-1: config 0 has no interface number 0 [ 1630.116931][T25327] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 1630.126110][T25327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.135957][T25327] usb 2-1: config 0 descriptor?? [ 1630.502603][T25327] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1630.513093][T25327] asix: probe of 2-1:0.84 failed with error -71 [ 1630.533005][T25327] usb 2-1: USB disconnect, device number 35 10:00:39 executing program 0: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:00:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0xf}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) 10:00:39 executing program 5: syz_open_dev$usbfs(&(0x7f0000001300)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x840802) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, &(0x7f0000001680)=@urb_type_bulk={0x3, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1, 0x7, 0x203, 0x0, 0x0, {}, [@nested={0x8, 0x7, [@typed={0x4, 0x1}]}]}, 0x1c}}, 0x0) 10:00:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x9}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x18, &(0x7f0000000280)={r1}, 0x8) 10:00:39 executing program 1: unshare(0x40600) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f0000000040)={0x2, 0x8, [0x0, 0x0]}) [ 1631.723274][ T1911] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:00:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffffff1c, 0x0, 0x0, 0x0) 10:00:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x300}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 10:00:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1, 0x7, 0x203, 0x0, 0x0, {}, [@nested={0x8, 0x7, [@typed={0x4, 0x1}]}]}, 0x1c}}, 0x0) 10:00:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={0x0, 0x5005000000000000, &(0x7f00000001c0)={&(0x7f0000000040)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x2, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x3, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) [ 1631.940339][ T1933] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1632.000258][ T1939] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1632.008667][ T1939] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1632.035179][ T1940] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:00:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_MIIMON={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xfffffffffffffff}]}}}]}, 0x44}}, 0x0) [ 1632.045761][ T1941] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1632.054545][ T1941] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 10:00:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000020000040050000a90000000000fae9fff7ff00000000000001000000000000002560b7adff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x489}]}) [ 1632.286750][ T1951] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1632.297647][ T1951] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 10:00:46 executing program 0: pipe2(&(0x7f0000000280), 0x0) unshare(0x20020400) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 10:00:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x7e, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:00:46 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:00:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000001100), 0x11e5) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1) 10:00:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x9}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x18, &(0x7f0000000280)={r1}, 0x8) 10:00:46 executing program 3: mkdir(&(0x7f0000002a00)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) getcwd(&(0x7f0000003a40)=""/4096, 0x1000) [ 1638.925179][ T1968] IPVS: ftp: loaded support on port[0] = 21 [ 1639.006324][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0xffff04d00000000f [ 1639.039443][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0xffff04d00000000f [ 1639.066241][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0xffff04d00000000f [ 1639.099678][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000041 data 0xffff04d00000000f [ 1639.125815][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0xffff04d00000000f [ 1639.139930][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0xffff04d00000000f 10:00:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x400000000000290, 0x0) [ 1639.169521][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000047 data 0xffff04d00000000f [ 1639.199860][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000015 data 0xffff04d00000000f 10:00:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000006606ddb0ac30630ef7f6656ba6ce5876289cd77e3206f869df2ee2939956a7cbf27b519e688d2127500fbc5190"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='trusted+\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000008c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1639.235163][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007f data 0xffff04d00000000f [ 1639.255300][ T1970] kvm [1965]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0xffff04d00000000f 10:00:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0x98f903, 0x0, [], @p_u8=0x0}}) 10:00:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001e0007041dfffd946f610500020000001f2d1f000000080005000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1639.729060][ T1968] IPVS: ftp: loaded support on port[0] = 21 10:00:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x9}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x18, &(0x7f0000000280)={r1}, 0x8) 10:00:47 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) [ 1639.885221][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:00:52 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fff, 0x0) 10:00:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x53390acbbaa08ff3, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}}, 0x0) 10:00:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001e0007041dfffd946f610500020000001f2d1f000000080005000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:00:52 executing program 3: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206430200a843092826274d040016000600154004004c00007aa3c728f1c46b7b31afdc1338d54400009b84136ef75afb6cde448daa7227c43ab8620f00bf0cec6bab91d4", 0x55}], 0x1}, 0x0) 10:00:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84, 0xcc01}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) 10:00:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) [ 1644.064787][ T2337] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1644.089181][ T2344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:00:52 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x20000057d) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) clock_adjtime(0x0, &(0x7f0000000280)={0x195f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x5}) write$P9_RLINK(r2, &(0x7f0000000000)={0x6}, 0x5d4) 10:00:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x1a, &(0x7f0000000300)=0x1, 0xfffffffffffffff3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e27, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) sendto$inet(r2, 0x0, 0x0, 0x4008000, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000500)={[], 0x1ff, 0x3b, 0x10001, 0x0, 0x80, 0x0, 0x3000, [], 0x4}) close(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) poll(0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)="580000001400192340834b80040d894ae58e8b8b9949d12e948c560a067fbc45ff8165a2c5680dba422cd0c5e11a9d0d160500000000000058000b480400945f6400940005003892c849000020000000008000f0fffeffe809000000fff5dd0000001001010003040000008e00000004fcff", 0x72}], 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) read(r5, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r4, 0x4, 0x0) sendfile(r4, r5, 0x0, 0x80003) 10:00:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic}) 10:00:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) [ 1644.240837][ T2354] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 10:00:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001e0007041dfffd946f610500020000001f2d1f000000080005000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:00:52 executing program 5: unshare(0x20040600) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) [ 1644.454010][ T2372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:00:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001e0007041dfffd946f610500020000001f2d1f000000080005000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:00:59 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) close(r0) 10:00:59 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) 10:00:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x1a, &(0x7f0000000300)=0x1, 0xfffffffffffffff3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e27, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) sendto$inet(r2, 0x0, 0x0, 0x4008000, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000500)={[], 0x1ff, 0x3b, 0x10001, 0x0, 0x80, 0x0, 0x3000, [], 0x4}) close(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) poll(0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)="580000001400192340834b80040d894ae58e8b8b9949d12e948c560a067fbc45ff8165a2c5680dba422cd0c5e11a9d0d160500000000000058000b480400945f6400940005003892c849000020000000008000f0fffeffe809000000fff5dd0000001001010003040000008e00000004fcff", 0x72}], 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) read(r5, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r4, 0x4, 0x0) sendfile(r4, r5, 0x0, 0x80003) 10:00:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, &(0x7f0000000140)) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:00:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) [ 1651.334630][ T2498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:00:59 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)=0xfffffd3d) 10:00:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r0, &(0x7f0000367fe4)=""/91, 0x275) 10:00:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) 10:00:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xb, @sdr={0x38305343}}) 10:00:59 executing program 4: fspick(0xffffffffffffff9c, 0x0, 0x7621f4e1a481f894) 10:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffb8, &(0x7f0000000140)) 10:00:59 executing program 2: r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, 0x0, 0x0) 10:01:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 10:01:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x1a, &(0x7f0000000300)=0x1, 0xfffffffffffffff3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e27, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) sendto$inet(r2, 0x0, 0x0, 0x4008000, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000500)={[], 0x1ff, 0x3b, 0x10001, 0x0, 0x80, 0x0, 0x3000, [], 0x4}) close(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) poll(0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)="580000001400192340834b80040d894ae58e8b8b9949d12e948c560a067fbc45ff8165a2c5680dba422cd0c5e11a9d0d160500000000000058000b480400945f6400940005003892c849000020000000008000f0fffeffe809000000fff5dd0000001001010003040000008e00000004fcff", 0x72}], 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) read(r5, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r4, 0x4, 0x0) sendfile(r4, r5, 0x0, 0x80003) 10:01:03 executing program 4: r0 = socket(0x10, 0x200000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001340)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) 10:01:03 executing program 5: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair(0x800000000000018, 0x0, 0x3, &(0x7f0000000040)) 10:01:03 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0xffff, "071ccd"}, "c1188f869a380ebca23c09903661233c6227b94859beea48a6f2"}}}}}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) prctl$PR_GET_FP_MODE(0x2e) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 10:01:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x200c198, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 10:01:03 executing program 5: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair(0x800000000000018, 0x0, 0x3, &(0x7f0000000040)) 10:01:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x1a, &(0x7f0000000300)=0x1, 0xfffffffffffffff3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e27, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) sendto$inet(r2, 0x0, 0x0, 0x4008000, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000500)={[], 0x1ff, 0x3b, 0x10001, 0x0, 0x80, 0x0, 0x3000, [], 0x4}) close(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) poll(0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)="580000001400192340834b80040d894ae58e8b8b9949d12e948c560a067fbc45ff8165a2c5680dba422cd0c5e11a9d0d160500000000000058000b480400945f6400940005003892c849000020000000008000f0fffeffe809000000fff5dd0000001001010003040000008e00000004fcff", 0x72}], 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) read(r5, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r4, 0x4, 0x0) sendfile(r4, r5, 0x0, 0x80003) 10:01:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045438, 0x71dff9) 10:01:04 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0xffff, "071ccd"}, "c1188f869a380ebca23c09903661233c6227b94859beea48a6f2"}}}}}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) prctl$PR_GET_FP_MODE(0x2e) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 10:01:04 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000009140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="c000000000000000000000000000000026d83f69b8cb649d16cc6d5a220adba653de759e115a3a8ff2eeb414724760df7c71d4d3e24aa83f8e477155fe5a16b38093a7be936bf87d86b22baafdbd2eb85f7a05e36c8959b2f4bca4a0d60e3d71ed354e931af1939f10017294536f74e78dd2409c1564f07b9d882fd3d224d08f736ca1b5bbb6ee5576d8e85243bfd3922f74a8a1e033fa170866fbb866681849cc1fe6009ba663db5ddfc7ea874ebfe3988eea740d424bb5d99c4e63b99dd0"], 0xbf}}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 10:01:04 executing program 5: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair(0x800000000000018, 0x0, 0x3, &(0x7f0000000040)) 10:01:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0xf0c887bdf013d536, 0x0) 10:01:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f00000000c0)) 10:01:10 executing program 5: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair(0x800000000000018, 0x0, 0x3, &(0x7f0000000040)) 10:01:10 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0xffff, "071ccd"}, "c1188f869a380ebca23c09903661233c6227b94859beea48a6f2"}}}}}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) prctl$PR_GET_FP_MODE(0x2e) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 10:01:10 executing program 3: r0 = socket$inet(0x10, 0x2040000000000002, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2f0000001c000507000000000d2300000200041f01000000fc0003c91300010000000000500000007321452e506f32", 0x2f}], 0x1}, 0x0) 10:01:10 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x54e3, 0x0) 10:01:10 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045007, 0x0) 10:01:11 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0xda, 0xd4, 0xea, 0x20, 0xccd, 0x10ae, 0x2715, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0x4c, 0x90, 0xa5}}]}}]}}, 0x0) 10:01:11 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) 10:01:11 executing program 4: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b", 0x5}], 0x1}}], 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 10:01:11 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0xffff, "071ccd"}, "c1188f869a380ebca23c09903661233c6227b94859beea48a6f2"}}}}}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) prctl$PR_GET_FP_MODE(0x2e) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 10:01:11 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe9b, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000010107031dfffd946fa2830020200a0009000800001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 10:01:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0) r2 = dup(r0) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00'}, 0x45c) [ 1663.427533][ T2845] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1663.464624][T18117] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1663.712977][T18117] usb 4-1: Using ep0 maxpacket: 32 [ 1663.832380][T18117] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1663.840622][T18117] usb 4-1: config 0 has no interface number 0 [ 1663.847103][T18117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=27.15 [ 1663.856338][T18117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.866047][T18117] usb 4-1: config 0 descriptor?? [ 1664.115462][T18117] usb 4-1: USB disconnect, device number 61 [ 1664.892420][T18117] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1665.132277][T18117] usb 4-1: Using ep0 maxpacket: 32 [ 1665.252294][T18117] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1665.260651][T18117] usb 4-1: config 0 has no interface number 0 [ 1665.267190][T18117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=27.15 [ 1665.276416][T18117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.286148][T18117] usb 4-1: config 0 descriptor?? [ 1665.524129][T18117] usb 4-1: USB disconnect, device number 62 10:01:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@fadd={0x58, 0x114, 0x3, {{}, 0x0, 0x0}}], 0x58}, 0x0) 10:01:18 executing program 4: io_setup(0x80000000, &(0x7f0000001400)) 10:01:18 executing program 0: clone(0x3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0x1, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrVex:1e', 0x0) 10:01:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8007ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x821, 0x0, 0x0, {0xa}}, 0x3b}}, 0x0) 10:01:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') lseek(r0, 0x20400000, 0x0) 10:01:18 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 1670.175418][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:01:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 10:01:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3321c20239f190df}}, 0x0, 0x0}, 0x0) [ 1670.266399][ T2873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:01:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') lseek(r0, 0x20400000, 0x0) 10:01:18 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)) [ 1670.482837][ T2921] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 10:01:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') lseek(r0, 0x20400000, 0x0) 10:01:18 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)) [ 1670.585794][ T2981] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 10:01:18 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 1670.682344][T18117] usb 3-1: new high-speed USB device number 50 using dummy_hcd 10:01:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000340)="7c0f0139390018650f380657f5660f38812a66b9800000c00f326635008000000f30662ef30f1eceb8d3e0baf80c66b8d244ba8866efbafc0cb000ee0f009e18000f0d37262626f30f1b970000", 0x4d}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1670.922322][T18117] usb 3-1: Using ep0 maxpacket: 8 [ 1671.046766][T18117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.058250][T18117] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1671.222364][T18117] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1671.231459][T18117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.239747][T18117] usb 3-1: Product: syz [ 1671.244042][T18117] usb 3-1: Manufacturer: syz [ 1671.248802][T18117] usb 3-1: SerialNumber: syz [ 1671.502771][T18117] usbhid 3-1:1.0: can't add hid device: -22 [ 1671.508907][T18117] usbhid: probe of 3-1:1.0 failed with error -22 [ 1671.706744][T18117] usb 3-1: USB disconnect, device number 50 [ 1672.472131][T21761] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1672.712178][T21761] usb 3-1: Using ep0 maxpacket: 8 [ 1672.832235][T21761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.843505][T21761] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1673.012297][T21761] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1673.021411][T21761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.029613][T21761] usb 3-1: Product: syz [ 1673.033992][T21761] usb 3-1: Manufacturer: syz [ 1673.038643][T21761] usb 3-1: SerialNumber: syz [ 1673.322619][T21761] usbhid 3-1:1.0: can't add hid device: -22 [ 1673.328737][T21761] usbhid: probe of 3-1:1.0 failed with error -22 [ 1673.337976][T21761] usb 3-1: USB disconnect, device number 51 10:01:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000740)={'IDLETIMER\x00'}, &(0x7f0000000780)=0x1e) 10:01:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001a40)={"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"}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:01:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 10:01:25 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 10:01:25 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)) 10:01:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') lseek(r0, 0x20400000, 0x0) 10:01:25 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)) 10:01:25 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x3) 10:01:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0x1}, [@typed={0x14, 0x3, @ipv6=@empty={[0x9d0c]}}]}, 0x28}}, 0x0) 10:01:25 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 1677.675797][ T3137] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:01:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x4}) 10:01:25 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x81, 0xffffffffffffff7f}) 10:01:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$team(0x0) fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'dummy0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r4 = socket(0x0, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000240)={@loopback, @dev, r7}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x803, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@loopback, @dev}, 0xc) socket(0x0, 0x803, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'batadv0\x00\x00\x00\x00\x00\x00\x00\fi'}]}, 0x1c) 10:01:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:01:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="4405ec0000", 0x5) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) 10:01:29 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x9, 0x1, 0x0, 0x1, [{}]}) 10:01:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 10:01:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 10:01:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x9e]}) [ 1681.634006][ T3270] bridge1: the hash_elasticity option has been deprecated and is always 16 10:01:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$ndb(&(0x7f0000000900)='/dev/nbd#\x00', 0x0, 0x0) 10:01:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 10:01:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10000802}) io_setup(0x4, &(0x7f0000000380)=0x0) io_submit(r2, 0x2d2, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, r1, 0x0, 0x3}]) 10:01:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 10:01:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="4405ec0000", 0x5) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) 10:01:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$ndb(&(0x7f0000000900)='/dev/nbd#\x00', 0x0, 0x0) [ 1682.203349][ T3405] bridge2: the hash_elasticity option has been deprecated and is always 16 10:01:30 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1ff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x1, 0x0, 0x0, 0x0) 10:01:30 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 10:01:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="4405ec0000", 0x5) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) 10:01:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$ndb(&(0x7f0000000900)='/dev/nbd#\x00', 0x0, 0x0) 10:01:30 executing program 4: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 10:01:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0xc, 0x0, &(0x7f0000ca5ffc)=0x2) 10:01:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$ndb(&(0x7f0000000900)='/dev/nbd#\x00', 0x0, 0x0) 10:01:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="4405ec0000", 0x5) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) 10:01:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x1f, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x2f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000140), 0x0}, 0x20) 10:01:36 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @rand_addr=0x9}, 0x10) 10:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400ad", 0x7}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0xf) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x2b1, 0x0) 10:01:37 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x41}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a2809302", 0x11}], 0x1}, 0x0) r2 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:01:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd62) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="9a07000000e800260f300fc75cf4c8d3641fb966ba410066b89e001f00d8efb902090000b800000000ba000000800f30b805000000b9e10000000f01c1b8010000000f01d9b933030000b84d000000ba000000000f3066ba430066b80070e5ae", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:01:37 executing program 4: mkdir(&(0x7f00000aa000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x23e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(r0, &(0x7f00000003c0)=@random={'user.', '+md5sum%)eth1(\x00'}, 0x0, 0x0, 0x0) 10:01:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="3d85f95c4347a9f741804d123341a24a13aa8d54cf6b07fe8318a8d82560dc1c732812f490a9553fd534c8756181d90bff131dded3d3ba050961b9b344b3fe9ec6196222132439a059d80c5fe787a5525511bcf6c7ccfadd68e1ddaeab70c368c288a642a3a4fc5622876e271f0b4d3799af49b932d28ece3d9fc4d85c2f83ee7e83239865287a96585bfe15ac3462f9cbf77fceec4a69e2acfc4bb7b8e78155cda7d7efe489d86d4b615a4394da1445618ab68551413ffd0794019fec4ad041141648e61565f78155e910b9e7bee3b5963ba9881c5b48a42f0ea807", 0xdc, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @remote, 0xfff}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 10:01:37 executing program 5: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='=', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f00000001c0)=""/133, 0x85, &(0x7f0000000340)={&(0x7f00000002c0)={'tgr192-generic\x00'}}) 10:01:37 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x80044100, &(0x7f0000001f64)) 10:01:44 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x80044100, &(0x7f0000001f64)) 10:01:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$IPC_SET(0x0, 0xf, &(0x7f00000001c0)={{0x0, 0x0, 0xee01, 0x0, 0xee01}}) 10:01:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:01:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x64, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @nop, @exp_fastopen={0xfe, 0xf, 0xf989, "b781e0000000f2290d7979"}, @md5sig={0x13, 0x12, "e19bdea16a577d8887b71f37fddbbb61"}]}}}}}}}}, 0x0) 10:01:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="3d85f95c4347a9f741804d123341a24a13aa8d54cf6b07fe8318a8d82560dc1c732812f490a9553fd534c8756181d90bff131dded3d3ba050961b9b344b3fe9ec6196222132439a059d80c5fe787a5525511bcf6c7ccfadd68e1ddaeab70c368c288a642a3a4fc5622876e271f0b4d3799af49b932d28ece3d9fc4d85c2f83ee7e83239865287a96585bfe15ac3462f9cbf77fceec4a69e2acfc4bb7b8e78155cda7d7efe489d86d4b615a4394da1445618ab68551413ffd0794019fec4ad041141648e61565f78155e910b9e7bee3b5963ba9881c5b48a42f0ea807", 0xdc, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @remote, 0xfff}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 10:01:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) close(r0) [ 1696.131586][ T3598] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 10:01:44 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x80044100, &(0x7f0000001f64)) 10:01:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000000)) 10:01:44 executing program 5: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000000), 0x12053df4) 10:01:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="3d85f95c4347a9f741804d123341a24a13aa8d54cf6b07fe8318a8d82560dc1c732812f490a9553fd534c8756181d90bff131dded3d3ba050961b9b344b3fe9ec6196222132439a059d80c5fe787a5525511bcf6c7ccfadd68e1ddaeab70c368c288a642a3a4fc5622876e271f0b4d3799af49b932d28ece3d9fc4d85c2f83ee7e83239865287a96585bfe15ac3462f9cbf77fceec4a69e2acfc4bb7b8e78155cda7d7efe489d86d4b615a4394da1445618ab68551413ffd0794019fec4ad041141648e61565f78155e910b9e7bee3b5963ba9881c5b48a42f0ea807", 0xdc, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @remote, 0xfff}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 10:01:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000002580)={0x1, 0x0, [{0x17b}]}) 10:01:44 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x80044100, &(0x7f0000001f64)) 10:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000580)=""/252, 0x261}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x8}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 10:01:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x2d}], 0xaaaae92, 0x0, 0x0, 0x22b89d5f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:01:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) close(r0) 10:01:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="3d85f95c4347a9f741804d123341a24a13aa8d54cf6b07fe8318a8d82560dc1c732812f490a9553fd534c8756181d90bff131dded3d3ba050961b9b344b3fe9ec6196222132439a059d80c5fe787a5525511bcf6c7ccfadd68e1ddaeab70c368c288a642a3a4fc5622876e271f0b4d3799af49b932d28ece3d9fc4d85c2f83ee7e83239865287a96585bfe15ac3462f9cbf77fceec4a69e2acfc4bb7b8e78155cda7d7efe489d86d4b615a4394da1445618ab68551413ffd0794019fec4ad041141648e61565f78155e910b9e7bee3b5963ba9881c5b48a42f0ea807", 0xdc, 0x80, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @remote, 0xfff}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 10:01:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="b830008ed80f20d86635080000000f22d8b8c0008ed80f22d3440f20c0663507000000440f22c06766c74424000a0000006766c74424022a2100006766c744240600000000670f011424643ef4660f380315650f01c56766c7442400cf609eae6766c74424026c0000006766c744240600000000670f011c24", 0x79}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:01:51 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 10:01:51 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000180)) unshare(0x20000400) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f00000000c0)) 10:01:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x374, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000009b"], 0x0}, 0x0) 10:01:51 executing program 1: socketpair(0x1d, 0x3, 0x1, &(0x7f0000000240)) 10:01:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) close(r0) 10:01:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 10:01:51 executing program 1: socketpair(0x1d, 0x3, 0x1, &(0x7f0000000240)) 10:01:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="b830008ed80f20d86635080000000f22d8b8c0008ed80f22d3440f20c0663507000000440f22c06766c74424000a0000006766c74424022a2100006766c744240600000000670f011424643ef4660f380315650f01c56766c7442400cf609eae6766c74424026c0000006766c744240600000000670f011c24", 0x79}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1703.694975][T21761] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1703.962225][T21761] usb 6-1: Using ep0 maxpacket: 32 [ 1704.082684][T21761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.094708][T21761] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1704.107758][T21761] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 1704.117351][T21761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.128191][T21761] usb 6-1: config 0 descriptor?? [ 1704.604860][T21761] sony 0003:054C:0374.0029: item fetching failed at offset 2054596810 [ 1704.614014][T21761] sony 0003:054C:0374.0029: parse failed [ 1704.620062][T21761] sony: probe of 0003:054C:0374.0029 failed with error -22 [ 1704.805585][T25327] usb 6-1: USB disconnect, device number 34 [ 1705.602371][T21761] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1705.842168][T21761] usb 6-1: Using ep0 maxpacket: 32 [ 1705.962451][T21761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.973725][T21761] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1705.987177][T21761] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 1705.996628][T21761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.006382][T21761] usb 6-1: config 0 descriptor?? [ 1706.305020][T21761] sony 0003:054C:0374.002A: item fetching failed at offset 2054596578 [ 1706.313972][T21761] sony 0003:054C:0374.002A: parse failed [ 1706.319871][T21761] sony: probe of 0003:054C:0374.002A failed with error -22 [ 1706.415686][T21761] usb 6-1: USB disconnect, device number 35 10:01:58 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x31) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000000)) 10:01:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) close(r0) 10:01:58 executing program 1: socketpair(0x1d, 0x3, 0x1, &(0x7f0000000240)) 10:01:58 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000140)='.dead\x00', 0x0, 0x0) 10:01:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="b830008ed80f20d86635080000000f22d8b8c0008ed80f22d3440f20c0663507000000440f22c06766c74424000a0000006766c74424022a2100006766c744240600000000670f011424643ef4660f380315650f01c56766c7442400cf609eae6766c74424026c0000006766c744240600000000670f011c24", 0x79}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:01:58 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0x3e, 0x5e, 0x8, 0x1557, 0x7720, 0x535a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x0, 0x0, 0x1d, 0x83, 0xe0}}]}}]}}, 0x0) 10:01:58 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x5}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 10:01:58 executing program 1: socketpair(0x1d, 0x3, 0x1, &(0x7f0000000240)) 10:01:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c9613ff8c2531d48e56c969a3547034571923a2c0e75ecb75217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731bd6a16792b1319e2acc0eb1ba8116a4ae39f9465a4cf19d78a65"], 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x10094) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}}, &(0x7f0000000180)=0xb0) 10:01:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="b830008ed80f20d86635080000000f22d8b8c0008ed80f22d3440f20c0663507000000440f22c06766c74424000a0000006766c74424022a2100006766c744240600000000670f011424643ef4660f380315650f01c56766c7442400cf609eae6766c74424026c0000006766c744240600000000670f011c24", 0x79}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1710.832914][T21761] usb 6-1: new high-speed USB device number 36 using dummy_hcd 10:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv6_getroute={0x30, 0x1a, 0x401, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x1e, @mcast1}]}, 0x30}}, 0x0) 10:01:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @pix_mp}) [ 1710.985782][ T3822] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 1711.021398][ T3823] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 1711.104459][T21761] usb 6-1: Using ep0 maxpacket: 8 [ 1711.242696][T21761] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 1711.251057][T21761] usb 6-1: config 0 has no interface number 0 [ 1711.257722][T21761] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=53.5a [ 1711.266987][T21761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.277141][T21761] usb 6-1: config 0 descriptor?? [ 1711.542529][T21761] asix 6-1:0.247 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1711.553104][T21761] asix: probe of 6-1:0.247 failed with error -71 [ 1711.564459][T21761] usb 6-1: USB disconnect, device number 36 [ 1712.292061][T25327] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1712.532018][T25327] usb 6-1: Using ep0 maxpacket: 8 [ 1712.652390][T25327] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 1712.660784][T25327] usb 6-1: config 0 has no interface number 0 [ 1712.667164][T25327] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=53.5a [ 1712.676400][T25327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.686170][T25327] usb 6-1: config 0 descriptor?? [ 1712.932852][T25327] asix 6-1:0.247 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1712.943321][T25327] asix: probe of 6-1:0.247 failed with error -71 [ 1712.953752][T25327] usb 6-1: USB disconnect, device number 37 10:02:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c) sendmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000018c0)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x1) 10:02:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x8840) sendmsg$netlink(r1, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@cred={{0x18, 0x117}}], 0x18}, 0x0) 10:02:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0) 10:02:04 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000340)={{0x0, 0x9}, 'port0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 10:02:04 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x5}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 10:02:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc}]}, 0x134}}, 0x0) 10:02:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="1f0000000000000000000040050400a90000e7fc4b83bbb6a23b4b6942b787100100000001a400002560b700fff0ffff0403ffffffff00000a00000006c7"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x2, [{0x186, 0x0, 0x489}]}) 10:02:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4090ae82, 0x0) dup2(r4, r3) 10:02:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="1f0000000000000000000040050400a90000e7fc4b83bbb6a23b4b6942b787100100000001a400002560b700fff0ffff0403ffffffff00000a00000006c7"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x2, [{0x186, 0x0, 0x489}]}) [ 1717.008814][ T3963] kvm [3960]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x489 [ 1717.092355][T21761] usb 3-1: new high-speed USB device number 52 using dummy_hcd 10:02:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="1f0000000000000000000040050400a90000e7fc4b83bbb6a23b4b6942b787100100000001a400002560b700fff0ffff0403ffffffff00000a00000006c7"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x2, [{0x186, 0x0, 0x489}]}) 10:02:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="1f0000000000000000000040050400a90000e7fc4b83bbb6a23b4b6942b787100100000001a400002560b700fff0ffff0403ffffffff00000a00000006c7"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x2, [{0x186, 0x0, 0x489}]}) [ 1717.352147][T21761] usb 3-1: Using ep0 maxpacket: 8 10:02:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4090ae82, 0x0) dup2(r4, r3) [ 1717.513024][T21761] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1717.521303][T21761] usb 3-1: config 0 has no interface number 0 [ 1717.527722][T21761] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1717.537396][T21761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.547869][T21761] usb 3-1: config 0 descriptor?? [ 1717.609325][T21761] go7007 3-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1717.619330][T21761] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 1717.630618][T21761] go7007: probe of 3-1:0.20 failed with error -12 [ 1717.806483][T21761] usb 3-1: USB disconnect, device number 52 [ 1718.582135][T25327] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1718.822073][T25327] usb 3-1: Using ep0 maxpacket: 8 [ 1718.942308][T25327] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1718.950484][T25327] usb 3-1: config 0 has no interface number 0 [ 1718.956868][T25327] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1718.966113][T25327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.975796][T25327] usb 3-1: config 0 descriptor?? [ 1719.018221][T25327] go7007 3-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1719.028027][T25327] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 1719.038896][T25327] go7007: probe of 3-1:0.20 failed with error -12 [ 1719.214250][T25327] usb 3-1: USB disconnect, device number 53 10:02:12 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x5}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 10:02:12 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0) 10:02:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4080000000000701, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4}, 0x1b) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000000)=0x10001, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x2023, 0x0, 0x2d3) 10:02:12 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:02:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4090ae82, 0x0) dup2(r4, r3) 10:02:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x583, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x8, 0x4) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x19}, 0x80000020002000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 10:02:12 executing program 4: setrlimit(0x400000000000007, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) 10:02:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x3}]}}}]}, 0x3c}}, 0x0) [ 1724.304592][T25327] usb 3-1: new high-speed USB device number 54 using dummy_hcd 10:02:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4090ae82, 0x0) dup2(r4, r3) 10:02:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="c5"}) 10:02:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x10, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x40}}, 0x0) [ 1724.552455][T25327] usb 3-1: Using ep0 maxpacket: 8 10:02:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x3, 0x2, [{0x491}]}) [ 1724.673147][T25327] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1724.681502][T25327] usb 3-1: config 0 has no interface number 0 [ 1724.687994][T25327] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1724.697288][T25327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.766859][T25327] usb 3-1: config 0 descriptor?? [ 1724.818548][T25327] go7007 3-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1724.828411][T25327] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 1724.839261][T25327] go7007: probe of 3-1:0.20 failed with error -12 [ 1725.020681][T25327] usb 3-1: USB disconnect, device number 54 10:02:19 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000140)=""/109, 0x6d) 10:02:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 10:02:19 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x5}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 10:02:19 executing program 4: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) 10:02:19 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 10:02:19 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0) 10:02:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_STAB={0x0, 0x2, "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"}]}}]}, 0x4c}}, 0x0) 10:02:19 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}}, 0x1b) [ 1731.455157][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:02:19 executing program 4: unshare(0x400) r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000040)=@un=@abs, 0x80) 10:02:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@setlink={0xa0, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa0}}, 0x0) 10:02:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) unshare(0x600) pread64(r1, &(0x7f0000000000)=""/11, 0xb, 0x7ffffffffffffffc) [ 1731.632498][T25327] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1731.667054][ T4070] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1731.699090][ T4072] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:02:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x80ffff, 0x2e, 0x80ffff]}, 0x2c) [ 1731.892632][T25327] usb 3-1: Using ep0 maxpacket: 8 [ 1732.022259][T25327] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1732.030826][T25327] usb 3-1: config 0 has no interface number 0 [ 1732.037228][T25327] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1732.046524][T25327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.056408][T25327] usb 3-1: config 0 descriptor?? [ 1732.098110][T25327] go7007 3-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1732.107964][T25327] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 1732.118748][T25327] go7007: probe of 3-1:0.20 failed with error -12 [ 1732.299049][T25327] usb 3-1: USB disconnect, device number 55 10:02:25 executing program 0: r0 = memfd_create(&(0x7f0000000200)='\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ftruncate(r0, 0x2000000) 10:02:25 executing program 4: r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r0}, 0x0, 0x0, 0x0) 10:02:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x28005) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x400}) 10:02:25 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) socket$inet6(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x0, "e4b80b549026321cd9e8af965a413c51a8f281ab19f01dea1af56603ae52bb5d8981a539b56de71d901630e949f38ae55a7249cd4b42e375bce9beba0778fb94c809ee5f1273a9a82dc736c48bb798a9"}, 0xd8) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) 10:02:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x20400) getsockopt$IP6T_SO_GET_INFO(r0, 0x88, 0xa, 0xffffffffffffffff, &(0x7f0000000040)) 10:02:25 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0) 10:02:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 10:02:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000, 0x0) tee(r0, r1, 0x4, 0x0) 10:02:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='/dev/audio\x00', 0x213, 0x0) 10:02:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) [ 1737.892568][T18117] usb 3-1: new high-speed USB device number 56 using dummy_hcd 10:02:26 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @dccp={{0x0, 0x4e20, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 10:02:26 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000914000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904050000020d00000904010102020d00000905820200000000000905030000000000000000ae30315a1e4f3b42f20edb7b7ee536da0bdddaed17c90aa6892a9f142186d6de9e18eb16bf1e7610a5c29d373f378171f24b243ae6268495cfa41c76ab9854714c0063a1c1a7a3fb8513f2c49bc39a0fdbb6bb33e60dbb286f7365b66b2fc2a5b57e665cf851bc61a92c602cf1dd57bf392ead96db90dede8320d3a6b956ac9d4856d1535fe80bfd845ee8823f3356ad5bfdd3e1ebbe8ce371a84db2546b2719eef18933e9178a63"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1738.132266][T18117] usb 3-1: Using ep0 maxpacket: 8 [ 1738.252718][T18117] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1738.260908][T18117] usb 3-1: config 0 has no interface number 0 [ 1738.267228][T18117] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1738.276551][T18117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.286895][T18117] usb 3-1: config 0 descriptor?? [ 1738.338200][T18117] go7007 3-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1738.348306][T18117] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 1738.359089][T18117] go7007: probe of 3-1:0.20 failed with error -12 [ 1738.372487][T15822] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1738.540008][T21761] usb 3-1: USB disconnect, device number 56 [ 1738.612061][T15822] usb 5-1: Using ep0 maxpacket: 8 [ 1738.732507][T15822] usb 5-1: config 1 has an invalid interface number: 5 but max is 1 [ 1738.740671][T15822] usb 5-1: config 1 has no interface number 0 [ 1738.747131][T15822] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1738.757045][T15822] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1738.922304][T15822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1738.931552][T15822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.939853][T15822] usb 5-1: Product: syz [ 1738.944247][T15822] usb 5-1: Manufacturer: syz [ 1738.948954][T15822] usb 5-1: SerialNumber: syz [ 1738.993816][T15822] cdc_ncm 5-1:1.5: bind() failure [ 1739.405103][T15822] usb 5-1: USB disconnect, device number 59 [ 1740.182149][T15822] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1740.432125][T15822] usb 5-1: Using ep0 maxpacket: 8 [ 1740.552378][T15822] usb 5-1: config 1 has an invalid interface number: 5 but max is 1 [ 1740.560606][T15822] usb 5-1: config 1 has no interface number 0 [ 1740.567013][T15822] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1740.576905][T15822] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1740.742676][T15822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1740.752048][T15822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.760159][T15822] usb 5-1: Product: syz [ 1740.764517][T15822] usb 5-1: Manufacturer: syz [ 1740.769213][T15822] usb 5-1: SerialNumber: syz [ 1740.833833][T15822] cdc_ncm 5-1:1.5: bind() failure [ 1741.042606][T15822] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1741.062854][T15822] usb 5-1: USB disconnect, device number 60 10:02:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000)=0x4, 0x4) 10:02:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0}) 10:02:32 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @dccp={{0x0, 0x4e20, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 10:02:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) 10:02:32 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000000)) 10:02:32 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000914000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904050000020d00000904010102020d00000905820200000000000905030000000000000000ae30315a1e4f3b42f20edb7b7ee536da0bdddaed17c90aa6892a9f142186d6de9e18eb16bf1e7610a5c29d373f378171f24b243ae6268495cfa41c76ab9854714c0063a1c1a7a3fb8513f2c49bc39a0fdbb6bb33e60dbb286f7365b66b2fc2a5b57e665cf851bc61a92c602cf1dd57bf392ead96db90dede8320d3a6b956ac9d4856d1535fe80bfd845ee8823f3356ad5bfdd3e1ebbe8ce371a84db2546b2719eef18933e9178a63"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:02:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) 10:02:33 executing program 5: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="ba4b976fff68", [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff86, 0x9}}}}}, 0x0) 10:02:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @dccp={{0x0, 0x4e20, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 10:02:33 executing program 2: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) r1 = dup2(r0, r0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000200)=0xfffffffffffffff8, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1745.076505][T18117] usb 5-1: new high-speed USB device number 61 using dummy_hcd 10:02:33 executing program 5: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 10:02:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000063de2c)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x3c}, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 1745.316826][ T4401] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable [ 1745.323038][T18117] usb 5-1: Using ep0 maxpacket: 8 [ 1745.330096][ T4401] debugfs: Directory 'vcpu0' with parent '4401-4' already present! [ 1745.442430][T18117] usb 5-1: config 1 has an invalid interface number: 5 but max is 1 [ 1745.450515][T18117] usb 5-1: config 1 has no interface number 0 [ 1745.456908][T18117] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1745.466818][T18117] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1745.632346][T18117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1745.641620][T18117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.649931][T18117] usb 5-1: Product: syz [ 1745.654227][T18117] usb 5-1: Manufacturer: syz [ 1745.658847][T18117] usb 5-1: SerialNumber: syz [ 1745.703888][T18117] cdc_ncm 5-1:1.5: bind() failure [ 1746.121480][T18117] usb 5-1: USB disconnect, device number 61 10:02:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') read$rfkill(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r0) sendfile(r4, r1, 0x0, 0x523) 10:02:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @dccp={{0x0, 0x4e20, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 10:02:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) 10:02:37 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn={0x1, 0x4}]}]}}}}}}}, 0x0) 10:02:37 executing program 5: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 10:02:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:02:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x30000000002, 0x0, 0x800004000) 10:02:37 executing program 5: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 10:02:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010000500d25a80648c63940d0324fc00100002400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 10:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000001c0)={0x2}) 10:02:37 executing program 5: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 1749.322166][T18117] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1749.354212][ T4442] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:02:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x30000000002, 0x0, 0x800004000) [ 1749.562778][T18117] usb 5-1: Using ep0 maxpacket: 8 [ 1749.682848][T18117] usb 5-1: config 1 has an invalid interface number: 5 but max is 1 [ 1749.691035][T18117] usb 5-1: config 1 has no interface number 0 [ 1749.697366][T18117] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1749.707324][T18117] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1749.872407][T18117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1749.881684][T18117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.889956][T18117] usb 5-1: Product: syz [ 1749.894305][T18117] usb 5-1: Manufacturer: syz [ 1749.899020][T18117] usb 5-1: SerialNumber: syz [ 1749.944376][T18117] cdc_ncm 5-1:1.5: bind() failure [ 1750.360280][T18117] usb 5-1: USB disconnect, device number 62 10:02:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xcd) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x98) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0xfc, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 10:02:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000013000/0x1000)=nil, 0x1000}) 10:02:44 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x18008, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000003c0)=""/231, 0x1b) 10:02:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x30000000002, 0x0, 0x800004000) 10:02:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x2, 0x0) dup3(r0, r1, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f000000a100)=[{{&(0x7f0000009f40)=@can, 0x80, 0x0}}], 0x1, 0x2001, 0x0) 10:02:44 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:02:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x30000000002, 0x0, 0x800004000) 10:02:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006}]}) 10:02:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000300)="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", 0xfc) 10:02:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000013000/0x1000)=nil, 0x1000}) [ 1756.623957][T18117] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1756.626342][ T4597] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. 10:02:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x5) 10:02:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000013000/0x1000)=nil, 0x1000}) [ 1756.862267][T18117] usb 5-1: Using ep0 maxpacket: 8 [ 1756.985632][T18117] usb 5-1: config 1 has an invalid interface number: 5 but max is 1 [ 1756.993881][T18117] usb 5-1: config 1 has no interface number 0 [ 1757.000151][T18117] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1757.010132][T18117] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1757.172671][T18117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1757.182136][T18117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.190167][T18117] usb 5-1: Product: syz [ 1757.194602][T18117] usb 5-1: Manufacturer: syz [ 1757.199273][T18117] usb 5-1: SerialNumber: syz [ 1757.243975][T18117] cdc_ncm 5-1:1.5: bind() failure [ 1757.670836][T18117] usb 5-1: USB disconnect, device number 63 10:02:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x6}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], []]}, 0x478) close(r0) 10:02:51 executing program 0: r0 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3e, &(0x7f0000000000), 0x20a154cc) 10:02:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x84763f5bf75e1ef, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000480)='HL\x00', 0x3, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:02:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) dup3(r0, r2, 0x0) 10:02:51 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000013000/0x1000)=nil, 0x1000}) 10:02:51 executing program 4: io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 10:02:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$join(0x1, &(0x7f0000000400)={'syz', 0x3}) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r1) 10:02:51 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 10:02:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) close(r0) fchdir(r0) 10:02:52 executing program 5: syz_usb_connect(0x0, 0xc8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x17, 0x9f, 0x200008, 0xccd, 0x99, 0xb151, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0xaa, 0x22}}]}}]}}, 0x0) 10:02:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe92, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nl=@proc, 0x10239, 0x0}, 0x2000) 10:02:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x84763f5bf75e1ef, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000480)='HL\x00', 0x3, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:02:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x138, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 1764.452314][T25327] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1764.692672][T25327] usb 6-1: Using ep0 maxpacket: 8 [ 1764.812437][T25327] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=b1.51 [ 1764.821554][T25327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.831337][T25327] usb 6-1: config 0 descriptor?? [ 1764.876829][T25327] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1764.883988][T25327] dvb_usb_af9015: probe of 6-1:0.0 failed with error -22 [ 1764.891423][T25327] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1764.898209][T25327] dvb_usb_af9035: probe of 6-1:0.0 failed with error -22 [ 1765.075087][T15822] usb 6-1: USB disconnect, device number 38 [ 1765.842179][T15822] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1766.082201][T15822] usb 6-1: Using ep0 maxpacket: 8 [ 1766.202369][T15822] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=b1.51 [ 1766.211596][T15822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.221571][T15822] usb 6-1: config 0 descriptor?? [ 1766.267255][T15822] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1766.276697][T15822] dvb_usb_af9015: probe of 6-1:0.0 failed with error -22 [ 1766.284271][T15822] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1766.290850][T15822] dvb_usb_af9035: probe of 6-1:0.0 failed with error -22 [ 1766.465508][T15822] usb 6-1: USB disconnect, device number 39 10:02:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/\xedf2\xf0w\xba\xd1 \x00', 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 10:02:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000005600)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x5, 0x1, 0x1000, 0xffffffffffff0001, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x3c) 10:02:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:02:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe92, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nl=@proc, 0x10239, 0x0}, 0x2000) 10:02:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x84763f5bf75e1ef, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000480)='HL\x00', 0x3, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:02:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000000702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d64050000000000450400000000000007040000002d2000b7040000100000206a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) 10:02:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe92, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nl=@proc, 0x10239, 0x0}, 0x2000) 10:02:57 executing program 5: r0 = socket(0x100000010, 0x20000000802, 0x0) write(r0, &(0x7f0000000280)="240000001a0025f00018000480ed4ead800000e0d45cffffffffff0008000f00fd000000", 0x24) 10:02:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x84763f5bf75e1ef, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000480)='HL\x00', 0x3, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:02:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newspdinfo={0x24, 0x24, 0xb01, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0x80ffffff}}, @ipv4_hthresh={0x8}]}, 0x24}}, 0x0) 10:02:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe92, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nl=@proc, 0x10239, 0x0}, 0x2000) 10:02:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x11, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 10:03:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x802, 0x0) dup3(r0, r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000600)="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", 0x57b, 0x8005, 0x0, 0x0) write(r1, &(0x7f00000003c0)='g', 0x1) 10:03:04 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x10, 0x6a, 0xc1, 0x8, 0xccd, 0x38, 0x9b1e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x51, 0x0, 0x0, 0xb, 0x78, 0xd5}}]}}]}}, 0x0) 10:03:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:03:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:03:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0014f9f40700090400020000000000000000000000080004001c000000", 0x24) 10:03:04 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0x2}, 0x0) 10:03:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="fb0cb0cce232e9a09e1e80f00b0c3eb633c37ea3a0", 0x15) 10:03:04 executing program 1: socket$netlink(0x10, 0x3, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0xd, 0x2, @TCA_CBS_PARMS={0x18, 0x2}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:03:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = epoll_create1(0x0) poll(&(0x7f0000000200)=[{r1, 0x1}], 0x87, 0x400000fffd) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x80000005}) [ 1776.375185][T15822] usb 6-1: new high-speed USB device number 40 using dummy_hcd 10:03:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000580)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000005c0)=0x1) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = gettid() process_vm_writev(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRESHEX], 0x2}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1776.474999][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1776.484603][ T5086] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:03:04 executing program 1: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0) [ 1776.622241][T15822] usb 6-1: Using ep0 maxpacket: 8 10:03:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "552f30fc1e5e162e"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1}}, {{&(0x7f0000000400)=@l2, 0x80, 0x0}}], 0x2, 0x2, 0x0) [ 1776.742451][T15822] usb 6-1: config 0 has an invalid interface number: 81 but max is 0 [ 1776.750666][T15822] usb 6-1: config 0 has no interface number 0 [ 1776.757326][T15822] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=9b.1e [ 1776.766602][T15822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.835658][T15822] usb 6-1: config 0 descriptor?? 10:03:04 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) read(r0, &(0x7f0000000040)=""/87, 0x57) ioctl$int_in(r0, 0x800000c0045009, &(0x7f00000000c0)=0x4) ioctl$int_in(r0, 0x800060c0045009, &(0x7f0000000100)=0x5) [ 1776.878290][T15822] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1776.888351][T15822] dvb-usb: bulk message failed: -22 (2/-30591) [ 1776.894724][T15822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1776.963637][T15822] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1776.973923][T15822] usb 6-1: media controller created [ 1777.097406][T15822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1777.180831][T15822] dvb-usb: bulk message failed: -22 (1/0) [ 1777.186990][T15822] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1777.234414][T15822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input111 [ 1777.251071][T15822] dvb-usb: schedule remote query interval to 50 msecs. [ 1777.258286][T15822] dvb-usb: bulk message failed: -22 (2/-30591) [ 1777.264700][T15822] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1777.307989][T15822] usb 6-1: USB disconnect, device number 40 [ 1777.426768][T15822] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1777.942162][T15822] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1778.182128][T15822] usb 6-1: Using ep0 maxpacket: 8 [ 1778.302361][T15822] usb 6-1: config 0 has an invalid interface number: 81 but max is 0 [ 1778.310531][T15822] usb 6-1: config 0 has no interface number 0 [ 1778.316952][T15822] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=9b.1e [ 1778.326156][T15822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.335880][T15822] usb 6-1: config 0 descriptor?? [ 1778.376269][T15822] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1778.385891][T15822] dvb-usb: bulk message failed: -22 (2/-30591) [ 1778.392410][T15822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1778.432559][T15822] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1778.442584][T15822] usb 6-1: media controller created [ 1778.471966][T15822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1778.497958][T15822] dvb-usb: bulk message failed: -22 (1/0) [ 1778.503970][T15822] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1778.564027][T15822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input112 [ 1778.578879][T15822] dvb-usb: schedule remote query interval to 50 msecs. [ 1778.585975][T15822] dvb-usb: bulk message failed: -22 (2/-30591) [ 1778.592266][T15822] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1778.608695][T15822] usb 6-1: USB disconnect, device number 41 [ 1778.735300][T15822] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. 10:03:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) unshare(0x400) fsync(r0) 10:03:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x350) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) 10:03:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:03:07 executing program 2: writev(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000a00)="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", 0x64a}], 0x1) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x10c8}], 0x1) 10:03:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_NF_CALL_IP6TABLES={0x8, 0x25, 0x8}, @IFLA_BR_NF_CALL_ARPTABLES={0x8}]}}}]}, 0x44}}, 0x0) 10:03:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) 10:03:10 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bond0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 10:03:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x203fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x2}, 0x10) dup2(r0, r2) 10:03:10 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x20, 0x0, 0x0) 10:03:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:03:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x401) 10:03:10 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000010491008460d81002b4d0000000109021b00010000000009046b0001783b2400090504138d3efa51445fe18a12e7bb340000000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:03:10 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bond0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 10:03:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0ffff0403ff03000001000a0000000686"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000020000008601000000860d0d2e"]) [ 1782.732659][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1782.739152][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:03:10 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, 0x8) 10:03:11 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bond0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) [ 1782.925038][T15822] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1783.172303][T15822] usb 2-1: Using ep0 maxpacket: 8 [ 1783.292376][T15822] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1783.300847][T15822] usb 2-1: config 0 has no interface number 0 [ 1783.307333][T15822] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x4 has an invalid bInterval 250, changing to 11 [ 1783.318785][T15822] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x4 has invalid maxpacket 1677, setting to 1024 [ 1783.330221][T15822] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=4d.2b [ 1783.339512][T15822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.361663][T15822] usb 2-1: config 0 descriptor?? [ 1783.405664][T15822] kobil_sct 2-1:0.107: KOBIL USB smart card terminal converter detected [ 1783.417533][T15822] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1783.607330][T25327] usb 2-1: USB disconnect, device number 36 [ 1783.616354][T25327] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1783.627487][T25327] kobil_sct 2-1:0.107: device disconnected [ 1784.382309][T15822] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1784.622033][T15822] usb 2-1: Using ep0 maxpacket: 8 [ 1784.742337][T15822] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1784.750621][T15822] usb 2-1: config 0 has no interface number 0 [ 1784.757025][T15822] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x4 has an invalid bInterval 250, changing to 11 [ 1784.768395][T15822] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x4 has invalid maxpacket 1677, setting to 1024 [ 1784.779722][T15822] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=4d.2b [ 1784.788928][T15822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.798512][T15822] usb 2-1: config 0 descriptor?? [ 1784.845396][T15822] kobil_sct 2-1:0.107: KOBIL USB smart card terminal converter detected [ 1784.857180][T15822] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1785.046385][T25327] usb 2-1: USB disconnect, device number 37 [ 1785.055638][T25327] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1785.066592][T25327] kobil_sct 2-1:0.107: device disconnected [ 1786.495787][ T5519] netlink: 'syz-executor.0': attribute type 37 has an invalid length. [ 1786.504154][ T5519] netlink: 'syz-executor.0': attribute type 38 has an invalid length. 10:03:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000260007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:03:16 executing program 5: mknod(&(0x7f0000000300)='./bus\x00', 0x1001040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x10000) open(&(0x7f0000000180)='./bus\x00', 0x122402, 0x0) 10:03:16 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bond0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 10:03:16 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, 0x8) 10:03:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x256c, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) 10:03:16 executing program 1: process_vm_writev(0x0, 0x0, 0xffffffffffffffc5, &(0x7f00000008c0)=[{&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000140)=""/127, 0x7f}], 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002240)=""/167, 0xa7}], 0x1, 0x0) process_vm_writev(0x0, 0x0, 0xffffffffffffff79, &(0x7f0000000780)=[{&(0x7f0000001fc0)=""/224, 0xe0}], 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000002300)={0x298, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x298}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 10:03:16 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, 0x8) 10:03:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x3, 0x0, [0x7000000], 0x0}) 10:03:16 executing program 1: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0) 10:03:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@rand_addr="02e573ac500ec333e0672465b60ecf1f"}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:03:17 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, 0x8) 10:03:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) [ 1788.914855][T25327] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1789.162895][T25327] usb 5-1: Using ep0 maxpacket: 8 [ 1789.282508][T25327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.294802][T25327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1789.307835][T25327] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40 [ 1789.317130][T25327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.327012][T25327] usb 5-1: config 0 descriptor?? [ 1790.042406][T25327] usb 5-1: string descriptor 0 read error: -71 [ 1790.062448][T25327] uclogic 0003:256C:006E.002B: failed retrieving string descriptor #200: -71 [ 1790.071354][T25327] uclogic 0003:256C:006E.002B: failed retrieving pen parameters: -71 [ 1790.079685][T25327] uclogic 0003:256C:006E.002B: failed probing pen v2 parameters: -71 [ 1790.087946][T25327] uclogic 0003:256C:006E.002B: failed probing parameters: -71 [ 1790.095729][T25327] uclogic: probe of 0003:256C:006E.002B failed with error -71 [ 1790.106121][T25327] usb 5-1: USB disconnect, device number 64 [ 1790.772168][T15822] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1791.012122][T15822] usb 5-1: Using ep0 maxpacket: 8 [ 1791.132286][T15822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.143388][T15822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1791.156380][T15822] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40 [ 1791.165662][T15822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.175226][T15822] usb 5-1: config 0 descriptor?? [ 1791.672472][T15822] usb 5-1: string descriptor 0 read error: -71 [ 1791.692801][T15822] uclogic 0003:256C:006E.002C: failed retrieving string descriptor #200: -71 [ 1791.701731][T15822] uclogic 0003:256C:006E.002C: failed retrieving pen parameters: -71 [ 1791.710107][T15822] uclogic 0003:256C:006E.002C: failed probing pen v2 parameters: -71 [ 1791.719070][T15822] uclogic 0003:256C:006E.002C: failed probing parameters: -71 [ 1791.726808][T15822] uclogic: probe of 0003:256C:006E.002C failed with error -71 [ 1791.737196][T15822] usb 5-1: USB disconnect, device number 65 [ 1794.817623][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:03:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="03", 0x1, 0x0, 0x0, 0x0) 10:03:23 executing program 2: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000100)="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", 0xff20) 10:03:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 10:03:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@rand_addr="02e573ac500ec333e0672465b60ecf1f"}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:03:23 executing program 5: mknod(&(0x7f0000000300)='./bus\x00', 0x1001040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x10000) open(&(0x7f0000000180)='./bus\x00', 0x122402, 0x0) 10:03:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @local}, 0xc) [ 1795.907446][ T5568] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 10:03:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="53000000c659ca807737f400000000000100960000000000000058edc0e4cfb5253c8b8f42ce5076dddf00200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424", 0x58}], 0x1) 10:03:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x0, 0x0, 0x40000081]}) 10:03:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffef8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="8100000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000002500070574e800100000773f50754d74", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:03:24 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$isdn(0x22, 0x3, 0x10) 10:03:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@rand_addr="02e573ac500ec333e0672465b60ecf1f"}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:03:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000/0x2000)=nil}) 10:03:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x2, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @local}, 0x10) 10:03:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) close(r1) 10:03:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000/0x2000)=nil}) 10:03:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x10, &(0x7f0000000100)={r1}, 0x8) 10:03:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@rand_addr="02e573ac500ec333e0672465b60ecf1f"}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:03:31 executing program 5: mknod(&(0x7f0000000300)='./bus\x00', 0x1001040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x10000) open(&(0x7f0000000180)='./bus\x00', 0x122402, 0x0) [ 1803.182575][ T5721] sctp: [Deprecated]: syz-executor.3 (pid 5721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1803.182575][ T5721] Use struct sctp_sack_info instead 10:03:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000/0x2000)=nil}) 10:03:31 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @loopback}}, 0x24) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) 10:03:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0x3e}}], 0x18}}], 0x1, 0x8000) 10:03:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000/0x2000)=nil}) 10:03:31 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f300000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4314c007110d00f3e90000080001006828f657bcff67", 0x1f) 10:03:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x11, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1803.665424][ T5846] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1803.687411][ T5846] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1803.727781][ T5846] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1809.454718][ T5955] device lo entered promiscuous mode [ 1809.461571][ T5726] device lo left promiscuous mode 10:03:38 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x100000000001, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x5}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 10:03:38 executing program 4: clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 10:03:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000600)={0x0, 0x0, 0xfffa, 0x1f65}) 10:03:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10, 0x117, 0x4}], 0x10}}], 0x2, 0x0) 10:03:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x14, 0x2, [@TCA_TBF_PARMS={0x10, 0x1, @mtu}]}}]}, 0x40}}, 0x0) 10:03:38 executing program 5: mknod(&(0x7f0000000300)='./bus\x00', 0x1001040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x10000) open(&(0x7f0000000180)='./bus\x00', 0x122402, 0x0) 10:03:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90x0) io_destroy(r2) 10:03:38 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x39, 0xcd, 0x8, 0x12d1, 0x1433, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfd, 0x0, 0x0, 0xcc, 0xe9, 0x50}}]}}]}}, 0x0) 10:03:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 10:03:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, [0x450f6d44]}) 10:03:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x0, 0x0, 0x0}) [ 1811.052729][T25327] usb 2-1: new full-speed USB device number 38 using dummy_hcd 10:03:39 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='}\xa9\x11\xf1\xdf\xe0\xdcZu\xfd\x01\xd8J\xe7\xcb\xc59\x14\xffj\xed\x02v\xfd\xb78P\x84\xd4\x86\"h\x1b\x87\xfd\x9f\xa9R\x9a\xd6\xd9\xc6\x98\xd3\x0e\xce\b\xa6\x9b7F\xbbz\x0eBf\xce\xde\xcf\xb5v\xe9\xa2\x8e\x02gX\xed\xab3{\xf4\xa1\xac\xda>\x12\xe4\xa4D\x87P\x9ea\x9d0\xac}9.;\x18{\xc9\xf9\xb9\x17r\xbe\xc2\xc8\xbd\x10\x86\x03^X\xfb\xf6(\xec<\xbbI\aw\v\'\xa2\x99', 0xffffffffffffff9c}, 0x10) [ 1811.412395][T25327] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1811.420690][T25327] usb 2-1: config 0 has no interface number 0 [ 1811.582769][T25327] usb 2-1: New USB device found, idVendor=12d1, idProduct=1433, bcdDevice= 0.00 [ 1811.592248][T25327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.600347][T25327] usb 2-1: Product: syz [ 1811.604762][T25327] usb 2-1: Manufacturer: syz [ 1811.609470][T25327] usb 2-1: SerialNumber: syz [ 1811.617949][T25327] usb 2-1: config 0 descriptor?? [ 1811.664035][T25327] usb-storage 2-1:0.253: USB Mass Storage device detected [ 1811.865699][T15822] usb 2-1: USB disconnect, device number 38 [ 1812.642290][T25327] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1813.012263][T25327] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1813.020529][T25327] usb 2-1: config 0 has no interface number 0 [ 1813.182623][T25327] usb 2-1: New USB device found, idVendor=12d1, idProduct=1433, bcdDevice= 0.00 [ 1813.192065][T25327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.200108][T25327] usb 2-1: Product: syz [ 1813.204461][T25327] usb 2-1: Manufacturer: syz [ 1813.209188][T25327] usb 2-1: SerialNumber: syz [ 1813.215645][T25327] usb 2-1: config 0 descriptor?? [ 1813.253992][T25327] usb-storage 2-1:0.253: USB Mass Storage device detected [ 1813.454954][T15822] usb 2-1: USB disconnect, device number 39 10:03:45 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [{}]}]}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 10:03:45 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 10:03:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00006ed000), &(0x7f0000000080)=0x1) 10:03:45 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000440)="737a0af0b307aa858303726b04eb7421985cb537abdfda44e549da8a2683ab7966daf167f01afed12db55865e0d66744c3ff0cd76ea9", 0x36, 0xfffffffffffffffc) keyctl$revoke(0x3, r1) creat(0x0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r4 = dup3(r3, r2, 0x0) openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) 10:03:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffef8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="8100000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 10:03:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0x4) 10:03:45 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x88001) 10:03:45 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x6) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f900"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) 10:03:46 executing program 5: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x800fffff}) timerfd_settime(r1, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) 10:03:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x26000000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setns(r2, 0x0) [ 1818.064568][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:03:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:03:46 executing program 5: syz_emit_ethernet(0x5f, &(0x7f0000000200)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x29, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @local, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local, [{0x4, 0x2, "19cfbc00cd9ee2451cfd4718917491"}]}}}}}}, 0x0) 10:03:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x42a}], 0x1, 0x0, 0xfffffffffffffcb2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2c3}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000016f, 0x0, &(0x7f0000003700)={0x77359400}) [ 1818.843691][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:03:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000040)=0x56e) 10:03:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:03:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x42, 0x0, 0x0) 10:03:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") fallocate(r0, 0x60, 0x0, 0x6) 10:03:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x88001) 10:03:53 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x6) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f900"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) [ 1825.182968][ T6376] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:03:53 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x0) write(r0, &(0x7f0000000040)="da", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000005, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f00000002c0)) 10:03:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:03:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) 10:03:53 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(r0) 10:03:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:03:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_spirange={0x2}]}, 0x30}}, 0x0) 10:03:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="4c000000150081f87059ae08060c0a000a840000400103fe0500030001546fabca1b4e7d06a6bd7c8f934eff030000ea94889e45bfae00000000e6d9220c7a18ab83136f4d395c7c890fe5e0", 0x4c}], 0x1}, 0x0) 10:03:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x88001) 10:03:59 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x6) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f900"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) 10:03:59 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs={0x1}, 0x6e) 10:03:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1e0, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x258) 10:03:59 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x57) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x400100000000011, 0x0, &(0x7f0000000080)=0xfffffffffffffe0c) [ 1831.552438][ T6420] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:03:59 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0xd6, 0xc4, 0x10, 0x1163, 0x100, 0x2321, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfd, 0x0, 0x2, 0x36, 0xbb, 0x23, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x9, 0x3}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0xffffffffffffffff) 10:03:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) 10:03:59 executing program 3: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000300)='\'', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) 10:03:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) 10:04:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) [ 1831.992355][T18117] usb 6-1: new high-speed USB device number 42 using dummy_hcd 10:04:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) [ 1832.232142][T18117] usb 6-1: Using ep0 maxpacket: 16 [ 1832.352417][T18117] usb 6-1: config 0 has an invalid interface number: 253 but max is 0 [ 1832.360720][T18117] usb 6-1: config 0 has no interface number 0 [ 1832.367413][T18117] usb 6-1: config 0 interface 253 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1832.378724][T18117] usb 6-1: config 0 interface 253 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1832.389932][T18117] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.21 [ 1832.399229][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.441159][T18117] usb 6-1: config 0 descriptor?? [ 1832.486255][T18117] cypress_m8 6-1:0.253: DeLorme Earthmate USB converter detected [ 1832.693984][T18117] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1832.895621][T15822] usb 6-1: USB disconnect, device number 42 [ 1832.905773][T15822] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1832.916163][T15822] cypress_m8 6-1:0.253: device disconnected [ 1833.662278][T18117] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1833.902075][T18117] usb 6-1: Using ep0 maxpacket: 16 [ 1834.022336][T18117] usb 6-1: config 0 has an invalid interface number: 253 but max is 0 [ 1834.030579][T18117] usb 6-1: config 0 has no interface number 0 [ 1834.036965][T18117] usb 6-1: config 0 interface 253 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1834.048196][T18117] usb 6-1: config 0 interface 253 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1834.059402][T18117] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.21 [ 1834.068597][T18117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.078336][T18117] usb 6-1: config 0 descriptor?? [ 1834.135214][T18117] cypress_m8 6-1:0.253: DeLorme Earthmate USB converter detected [ 1834.354863][T18117] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1834.556004][T15822] usb 6-1: USB disconnect, device number 43 [ 1834.565519][T15822] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1834.575986][T15822] cypress_m8 6-1:0.253: device disconnected 10:04:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000280), 0x4) 10:04:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = epoll_create1(0x0) r2 = socket(0x2, 0x80805, 0x0) shutdown(r2, 0x1) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:04:05 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x88001) 10:04:05 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x6) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f900"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) 10:04:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7f, 0x7, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x5a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/4096}, 0x20) 10:04:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x98) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 1837.736464][ T6660] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:04:05 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) 10:04:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "d2ba5114533cc491", "67d589de6b5f8d6acf4bcc664256a05e", "7c0f9289", "fc08cbb23cf05dd6"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 10:04:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x98) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:04:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = epoll_create1(0x0) r2 = socket(0x2, 0x80805, 0x0) shutdown(r2, 0x1) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:04:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x98) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 1838.407994][ T6778] ===================================================== [ 1838.414243][ T6778] BUG: KMSAN: uninit-value in aes_encrypt+0x12d5/0x1bd0 [ 1838.414243][ T6778] CPU: 0 PID: 6778 Comm: syz-executor.2 Not tainted 5.4.0-rc2+ #0 [ 1838.414243][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.414243][ T6778] Call Trace: [ 1838.414243][ T6778] dump_stack+0x191/0x1f0 [ 1838.414243][ T6778] kmsan_report+0x14e/0x2c0 [ 1838.414243][ T6778] __msan_warning+0x73/0xe0 [ 1838.414243][ T6778] aes_encrypt+0x12d5/0x1bd0 [ 1838.457302][ T6778] aesti_encrypt+0xe8/0x130 [ 1838.457302][ T6778] ? aesti_set_key+0xb0/0xb0 [ 1838.457302][ T6778] crypto_cbcmac_digest_update+0x3cf/0x550 [ 1838.457302][ T6778] ? crypto_cbcmac_digest_init+0x140/0x140 [ 1838.457302][ T6778] shash_ahash_finup+0x659/0xb20 [ 1838.457302][ T6778] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1838.457302][ T6778] shash_async_finup+0xbb/0x110 [ 1838.457302][ T6778] crypto_ahash_op+0x1cd/0x6e0 [ 1838.457302][ T6778] ? shash_async_final+0x420/0x420 [ 1838.505942][ T6778] ? shash_async_final+0x420/0x420 [ 1838.505942][ T6778] ? shash_async_final+0x420/0x420 [ 1838.505942][ T6778] crypto_ahash_finup+0x8c/0xb0 [ 1838.505942][ T6778] crypto_ccm_auth+0x14b2/0x1570 [ 1838.505942][ T6778] ? sg_next+0x83/0x130 [ 1838.505942][ T6778] crypto_ccm_encrypt+0x283/0x840 [ 1838.505942][ T6778] ? crypto_ccm_setauthsize+0xc0/0xc0 [ 1838.505942][ T6778] crypto_aead_encrypt+0xf2/0x180 [ 1838.505942][ T6778] tls_push_record+0x341e/0x4e50 [ 1838.551820][ T6778] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1838.551820][ T6778] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1838.551820][ T6778] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1838.551820][ T6778] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1838.572153][ T6778] ? get_user_pages_fast+0x69b/0x6e0 [ 1838.572153][ T6778] ? kmsan_get_metadata+0x39/0x350 [ 1838.572153][ T6778] tls_sw_sendmsg+0x158d/0x2710 [ 1838.588241][ T6778] ? udpv6_rcv+0x70/0x70 [ 1838.588241][ T6778] ? tls_tx_records+0xb40/0xb40 [ 1838.599172][ T6778] inet6_sendmsg+0x2d8/0x2e0 [ 1838.599172][ T6778] ? inet6_ioctl+0x340/0x340 [ 1838.599172][ T6778] __sys_sendto+0x8fc/0xc70 [ 1838.612154][ T6778] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1838.612154][ T6778] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1838.612154][ T6778] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 1838.612154][ T6778] __se_sys_sendto+0x107/0x130 [ 1838.612154][ T6778] __x64_sys_sendto+0x6e/0x90 [ 1838.612154][ T6778] do_syscall_64+0xb6/0x160 [ 1838.612154][ T6778] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1838.612154][ T6778] RIP: 0033:0x459a59 [ 1838.612154][ T6778] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1838.612154][ T6778] RSP: 002b:00007f28fc620c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1838.612154][ T6778] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a59 [ 1838.612154][ T6778] RDX: fffffffffffffee0 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1838.612154][ T6778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 00000000000000b6 [ 1838.612154][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28fc6216d4 [ 1838.612154][ T6778] R13: 00000000004c7c6d R14: 00000000004dda70 R15: 00000000ffffffff [ 1838.612154][ T6778] [ 1838.612154][ T6778] Uninit was stored to memory at: [ 1838.612154][ T6778] kmsan_internal_chain_origin+0xbd/0x170 [ 1838.612154][ T6778] __msan_chain_origin+0x6b/0xe0 [ 1838.612154][ T6778] __crypto_xor+0x1e8/0x1470 [ 1838.612154][ T6778] crypto_cbcmac_digest_update+0x2ba/0x550 [ 1838.612154][ T6778] shash_ahash_finup+0x659/0xb20 [ 1838.612154][ T6778] shash_async_finup+0xbb/0x110 [ 1838.612154][ T6778] crypto_ahash_op+0x1cd/0x6e0 [ 1838.612154][ T6778] crypto_ahash_finup+0x8c/0xb0 [ 1838.612154][ T6778] crypto_ccm_auth+0x14b2/0x1570 [ 1838.612154][ T6778] crypto_ccm_encrypt+0x283/0x840 [ 1838.612154][ T6778] crypto_aead_encrypt+0xf2/0x180 [ 1838.612154][ T6778] tls_push_record+0x341e/0x4e50 [ 1838.612154][ T6778] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1838.612154][ T6778] tls_sw_sendmsg+0x158d/0x2710 [ 1838.612154][ T6778] inet6_sendmsg+0x2d8/0x2e0 [ 1838.612154][ T6778] __sys_sendto+0x8fc/0xc70 [ 1838.612154][ T6778] __se_sys_sendto+0x107/0x130 [ 1838.612154][ T6778] __x64_sys_sendto+0x6e/0x90 [ 1838.612154][ T6778] do_syscall_64+0xb6/0x160 [ 1838.612154][ T6778] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1838.612154][ T6778] [ 1838.612154][ T6778] Uninit was created at: [ 1838.612154][ T6778] kmsan_save_stack_with_flags+0x3f/0x90 [ 1838.612154][ T6778] kmsan_alloc_page+0x153/0x360 [ 1838.612154][ T6778] __alloc_pages_nodemask+0x149d/0x60c0 [ 1838.612154][ T6778] alloc_pages_current+0x68d/0x9a0 [ 1838.612154][ T6778] skb_page_frag_refill+0x2b0/0x580 [ 1838.612154][ T6778] sk_page_frag_refill+0xa4/0x330 [ 1838.612154][ T6778] sk_msg_alloc+0x203/0x1050 [ 1838.612154][ T6778] tls_sw_sendmsg+0xb56/0x2710 [ 1838.612154][ T6778] inet6_sendmsg+0x2d8/0x2e0 [ 1838.612154][ T6778] __sys_sendto+0x8fc/0xc70 [ 1838.612154][ T6778] __se_sys_sendto+0x107/0x130 [ 1838.612154][ T6778] __x64_sys_sendto+0x6e/0x90 [ 1838.612154][ T6778] do_syscall_64+0xb6/0x160 [ 1838.612154][ T6778] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1838.612154][ T6778] ===================================================== [ 1838.612154][ T6778] Disabling lock debugging due to kernel taint [ 1838.612154][ T6778] Kernel panic - not syncing: panic_on_warn set ... [ 1838.612154][ T6778] CPU: 0 PID: 6778 Comm: syz-executor.2 Tainted: G B 5.4.0-rc2+ #0 [ 1838.612154][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.612154][ T6778] Call Trace: [ 1838.612154][ T6778] dump_stack+0x191/0x1f0 [ 1838.612154][ T6778] panic+0x3c9/0xc1e [ 1838.612154][ T6778] kmsan_report+0x2b6/0x2c0 [ 1838.612154][ T6778] __msan_warning+0x73/0xe0 [ 1838.612154][ T6778] aes_encrypt+0x12d5/0x1bd0 [ 1838.612154][ T6778] aesti_encrypt+0xe8/0x130 [ 1838.612154][ T6778] ? aesti_set_key+0xb0/0xb0 [ 1838.612154][ T6778] crypto_cbcmac_digest_update+0x3cf/0x550 [ 1838.612154][ T6778] ? crypto_cbcmac_digest_init+0x140/0x140 [ 1838.612154][ T6778] shash_ahash_finup+0x659/0xb20 [ 1838.612154][ T6778] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1838.612154][ T6778] shash_async_finup+0xbb/0x110 [ 1838.612154][ T6778] crypto_ahash_op+0x1cd/0x6e0 [ 1838.612154][ T6778] ? shash_async_final+0x420/0x420 [ 1838.612154][ T6778] ? shash_async_final+0x420/0x420 [ 1838.612154][ T6778] ? shash_async_final+0x420/0x420 [ 1838.612154][ T6778] crypto_ahash_finup+0x8c/0xb0 [ 1838.612154][ T6778] crypto_ccm_auth+0x14b2/0x1570 [ 1838.612154][ T6778] ? sg_next+0x83/0x130 [ 1838.612154][ T6778] crypto_ccm_encrypt+0x283/0x840 [ 1838.612154][ T6778] ? crypto_ccm_setauthsize+0xc0/0xc0 [ 1838.612154][ T6778] crypto_aead_encrypt+0xf2/0x180 [ 1838.612154][ T6778] tls_push_record+0x341e/0x4e50 [ 1838.612154][ T6778] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1838.612154][ T6778] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1838.612154][ T6778] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1838.612154][ T6778] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1838.612154][ T6778] ? get_user_pages_fast+0x69b/0x6e0 [ 1838.612154][ T6778] ? kmsan_get_metadata+0x39/0x350 [ 1838.612154][ T6778] tls_sw_sendmsg+0x158d/0x2710 [ 1838.612154][ T6778] ? udpv6_rcv+0x70/0x70 [ 1838.612154][ T6778] ? tls_tx_records+0xb40/0xb40 [ 1838.612154][ T6778] inet6_sendmsg+0x2d8/0x2e0 [ 1838.612154][ T6778] ? inet6_ioctl+0x340/0x340 [ 1838.612154][ T6778] __sys_sendto+0x8fc/0xc70 [ 1838.612154][ T6778] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1838.612154][ T6778] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1838.612154][ T6778] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 1838.612154][ T6778] __se_sys_sendto+0x107/0x130 [ 1838.612154][ T6778] __x64_sys_sendto+0x6e/0x90 [ 1838.612154][ T6778] do_syscall_64+0xb6/0x160 [ 1838.612154][ T6778] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1838.612154][ T6778] RIP: 0033:0x459a59 [ 1838.612154][ T6778] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1838.612154][ T6778] RSP: 002b:00007f28fc620c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1838.612154][ T6778] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a59 [ 1838.612154][ T6778] RDX: fffffffffffffee0 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1838.612154][ T6778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 00000000000000b6 [ 1838.612154][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28fc6216d4 [ 1838.612154][ T6778] R13: 00000000004c7c6d R14: 00000000004dda70 R15: 00000000ffffffff [ 1838.612154][ T6778] Kernel Offset: disabled [ 1838.612154][ T6778] Rebooting in 86400 seconds..