[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 86.660689][ T31] audit: type=1800 audit(1571769171.719:25): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.684457][ T31] audit: type=1800 audit(1571769171.749:26): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.734100][ T31] audit: type=1800 audit(1571769171.779:27): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. 2019/10/22 18:33:06 fuzzer started 2019/10/22 18:33:10 dialing manager at 10.128.0.26:34203 2019/10/22 18:33:10 syscalls: 2415 2019/10/22 18:33:10 code coverage: enabled 2019/10/22 18:33:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/22 18:33:10 extra coverage: enabled 2019/10/22 18:33:10 setuid sandbox: enabled 2019/10/22 18:33:10 namespace sandbox: enabled 2019/10/22 18:33:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 18:33:10 fault injection: enabled 2019/10/22 18:33:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 18:33:10 net packet injection: enabled 2019/10/22 18:33:10 net device setup: enabled 2019/10/22 18:33:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 18:37:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) syzkaller login: [ 347.567187][T12346] IPVS: ftp: loaded support on port[0] = 21 [ 347.723925][T12346] chnl_net:caif_netlink_parms(): no params data found [ 347.786996][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.794381][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.803287][T12346] device bridge_slave_0 entered promiscuous mode [ 347.813473][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.820678][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.829654][T12346] device bridge_slave_1 entered promiscuous mode [ 347.863451][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.876834][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.912375][T12346] team0: Port device team_slave_0 added [ 347.921972][T12346] team0: Port device team_slave_1 added [ 348.038467][T12346] device hsr_slave_0 entered promiscuous mode [ 348.293906][T12346] device hsr_slave_1 entered promiscuous mode [ 348.575131][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.582379][T12346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.590294][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.597609][T12346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.682397][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.704021][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.738428][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.749662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.802486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 348.906751][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.920912][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.930501][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.939691][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.946940][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.994738][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.004493][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.013729][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.020951][T12350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.029579][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.040522][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.050720][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.060835][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.070683][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.081244][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.091338][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.100752][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.110097][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.119361][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.133675][T12346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.142429][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.189070][T12346] 8021q: adding VLAN 0 to HW filter on device batadv0 18:37:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getpid() 18:37:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getpid() 18:37:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getpid() 18:37:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getpid() 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) 18:37:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) 18:37:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) 18:37:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 351.541750][T12407] IPVS: ftp: loaded support on port[0] = 21 [ 351.694204][T12407] chnl_net:caif_netlink_parms(): no params data found [ 351.755375][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.762894][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.771777][T12407] device bridge_slave_0 entered promiscuous mode [ 351.782759][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.790062][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.799023][T12407] device bridge_slave_1 entered promiscuous mode [ 351.835461][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.848934][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) [ 351.896250][T12407] team0: Port device team_slave_0 added [ 351.906503][T12407] team0: Port device team_slave_1 added 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 352.037913][T12407] device hsr_slave_0 entered promiscuous mode 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 352.084128][T12407] device hsr_slave_1 entered promiscuous mode [ 352.153148][T12407] debugfs: Directory 'hsr0' with parent '/' already present! 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 352.206961][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.214301][T12407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.222086][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.229446][T12407] bridge0: port 1(bridge_slave_0) entered forwarding state 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x49, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) [ 352.398696][T12407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.441986][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.458520][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.468558][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.482304][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) socket$inet6(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) [ 352.507201][T12407] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.527819][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.536989][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.544245][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.626620][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.635897][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.643157][T12350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.654386][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.665791][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.675480][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.706553][T12407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.719233][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) [ 352.730633][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.740469][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.786646][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0 18:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 18:37:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 18:37:18 executing program 1: fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') timerfd_create(0x0, 0x80000) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 18:37:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 18:37:18 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:18 executing program 1: getrandom(&(0x7f0000001f00)=""/56, 0x38, 0x3) 18:37:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:18 executing program 1: madvise(&(0x7f0000bdc000/0x1000)=nil, 0x1000, 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:37:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x49, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x49, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x278}, {r1, 0x4100}, {r2}, {r3, 0x8002}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x1400000}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x1ff, 0x40, 0x7, 0x0, 0x5, 0x0, 0xf9, 0x774156ab, 0x0, 0x0, 0x8}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) dup(0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) 18:37:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:18 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 18:37:18 executing program 1: r0 = syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0x200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r2, &(0x7f000000a080), 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) accept4$alg(r1, 0x0, 0x0, 0x81000) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 18:37:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 18:37:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 18:37:19 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 354.233107][ T3935] usb 2-1: new high-speed USB device number 2 using dummy_hcd 18:37:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x404080, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x505, 0x20, 0x2, 0x4000}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x2}, 0x8) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x915354da72ba938c, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x3) 18:37:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x0, 0x1, 'l'}, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e22, 0x80000000, @empty, 0x3}}, 0xf8e, 0x2}, &(0x7f0000000140)=0x90) [ 354.472797][ T3935] usb 2-1: Using ep0 maxpacket: 8 [ 354.593775][ T3935] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2 [ 354.603065][ T3935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.873666][ T3935] usb 2-1: Invalid connection information received from device [ 355.081569][T12350] usb 2-1: USB disconnect, device number 2 18:37:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x424d01, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) 18:37:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x40000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r2, &(0x7f0000057fa0)=[{}], 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 355.862852][T12350] usb 2-1: new high-speed USB device number 3 using dummy_hcd 18:37:21 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000140)=0x2) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7be, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$packet(r1, &(0x7f0000000100)={0x11, 0x1c, r5, 0x1, 0x0, 0x6, @random="ee35f313eca4"}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r6, 0x540e, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x480c0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0x7) [ 356.143677][T12350] usb 2-1: Using ep0 maxpacket: 8 [ 356.154823][T12510] bond1 (unregistering): Released all slaves [ 356.263922][T12350] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2 [ 356.273196][T12350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.343498][T12512] bond1 (unregistering): Released all slaves 18:37:21 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x8, {{0xfff, 0x4, 0x3, 0x4, 0x81, 0x100, 0xfffffff8, 0x9}}}, 0x60) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8, 0x88280) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000200)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x4, {0x82, 0x3, 0x4}, 0x188, r3, r4, 0x40, 0x7, 0x1f, 0x7, 0x6, 0x6, 0xe9, 0x100000000, 0x1, 0x81, 0x7, 0x4, 0x4, 0x3, 0x7}}, 0xa0) ioctl$int_in(r1, 0x2a10, &(0x7f0000000400)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x800, 0x0) fchmod(r5, 0x1) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x6000, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000004c0)=r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x99f6, 0x5, 0xf8, 0x4}]}) syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x200, 0x200000) r8 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r8, 0x9) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-vsock\x00', 0x2, 0x0) r10 = syz_open_dev$admmidi(&(0x7f00000006c0)='/dev/admmidi#\x00', 0x4, 0x181400) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000700)={0x3, r10}) r11 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x7fff, 0x1) ioctl$GIO_SCRNMAP(r11, 0x4b40, &(0x7f0000000780)=""/4096) connect$tipc(r6, &(0x7f0000001780)=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}, 0x3}}, 0x10) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000001bc0)={&(0x7f0000001b40), 0xc, &(0x7f0000001b80)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) pipe(&(0x7f0000001c00)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r13, 0x0, 0x81, &(0x7f0000001d00)={'filter\x00', 0x0, 0x4, 0x46, [], 0x4, &(0x7f0000001c40)=[{}, {}, {}, {}], &(0x7f0000001c80)=""/70}, &(0x7f0000001d80)=0x78) [ 356.554479][T12350] usb 2-1: Invalid connection information received from device 18:37:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$TCXONC(r0, 0x540a, 0x3e8) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000140)=""/71) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000080)=""/223, 0xdf}], 0x2, 0x2) [ 356.760353][T12350] usb 2-1: USB disconnect, device number 3 18:37:22 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000140)=0x2) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7be, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$packet(r1, &(0x7f0000000100)={0x11, 0x1c, r5, 0x1, 0x0, 0x6, @random="ee35f313eca4"}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r6, 0x540e, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x480c0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0x7) 18:37:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x440000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 357.081752][T12525] IPVS: ftp: loaded support on port[0] = 21 18:37:22 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000000, 0x400000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="36000306ba85ba796d3e3a177e49100005070fe6c0656c414d5f1a5070fa7a5e71000018000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote, @empty, @local, 0x800, 0x2, 0x0, 0x300, 0x8000, 0x10000, r4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) [ 357.361855][T12525] chnl_net:caif_netlink_parms(): no params data found 18:37:22 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='%posix_acl_accesscgroup@eth1em1ppp1&\x00', 0x25) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000900)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000abb000/0x1000)=nil, &(0x7f0000a23000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000602000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 18:37:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc6d95d22c91de43f, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 357.516466][T12525] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.523775][T12525] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.532535][T12525] device bridge_slave_0 entered promiscuous mode [ 357.580395][T12525] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.587815][T12525] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.597063][T12525] device bridge_slave_1 entered promiscuous mode 18:37:22 executing program 1: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x79, 0x4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80804}, 0x0) 18:37:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r2, &(0x7f0000057fa0)=[{}], 0x10) readv(r2, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000000700)=""/24, 0x18}], 0x9) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xf3c, 0x40}, {0x0, 0xf864}, {0x2, 0x81}, {0x8}, {0x3, 0x1}, {0x81, 0x200}]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 357.657081][T12525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.691594][T12525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.779665][T12525] team0: Port device team_slave_0 added [ 357.803669][T12525] team0: Port device team_slave_1 added 18:37:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 357.897876][T12525] device hsr_slave_0 entered promiscuous mode [ 357.946386][T12525] device hsr_slave_1 entered promiscuous mode [ 357.955751][T12555] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 358.004099][T12525] debugfs: Directory 'hsr0' with parent '/' already present! 18:37:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 358.047644][T12525] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.054935][T12525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.062770][T12525] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.069983][T12525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.243212][T12525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.255843][ T3935] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.275192][ T3935] bridge0: port 2(bridge_slave_1) entered disabled state 18:37:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 358.324827][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.333728][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.353920][T12525] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.393540][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.403676][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.412771][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.419961][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.483490][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.495573][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.504750][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.511949][T12350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.521482][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.531632][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.541735][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.551814][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.561715][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.571642][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.581327][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.590661][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.617522][T12525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.630013][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.670484][T12525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.690092][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.699669][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.709104][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.924166][T12570] QAT: Invalid ioctl [ 358.935831][T12570] QAT: Invalid ioctl [ 359.024590][T12570] QAT: Invalid ioctl [ 359.029217][T12571] QAT: Invalid ioctl 18:37:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x420002, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x801, 0xa6) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000100), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "fd33e029eeee8f70f9f7072aa0d9a34cb9693c9d156147e6c23b31cb42195208c8910647adfaf8b2f55394ecf4a2189df66f9e52cfb8c1a49a6af92a7695086a580b200b7e84f468c7dc0541178032889d99983dc4a733c1ffffff86ae4e8247b183e74e898f9f9c4826d70a4caf9f5af65faabb5eadaf00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r5, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x0) write$FUSE_LSEEK(r5, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x100}}, 0x18) r6 = dup(r4) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r7, 0x0, 0xffffffb0) keyctl$negate(0xd, r7, 0x100000000, 0xfffffffffffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:37:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 359.396519][T12582] kvm: emulating exchange as write 18:37:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0x0, 0x6, 0x400}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000100)) 18:37:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x8000) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000040)=0xdb90) r3 = syz_open_procfs(0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x6) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x6}, 0xffff}}, 0x18) 18:37:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 360.057119][T12578] debugfs: Directory '12578-4' with parent 'kvm' already present! 18:37:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x60000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) 18:37:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b4090000303aff80000000000000000000ffffe0000002ff020000000000000000000000000001870090780009040060b680fa0000000000000000000000000e03ffffffffffff00000000000000000000ffffac14ffbb2454b6f7b820342a2013ef3b1ea65e23e2b2d4783b5d5741975e685114b63b9f201bf65e611d735ca96e6b9c6ea9c85f68bdf6488fcae1b9a46fe4a0163907116eade8f501e450e1e542240dacb6b1e7d693d25f5572377c7ef47b7313f9207f341b046c83162812bdb73a47c085df84d28172bd632ef511b01fe3b3a99c3e7f97e5a5be3ba713be77a8867b2b008333b14d5d6b8b75ece8f544d4056e5d01c46ea5495c2c78ec66470a797fc5f5a35d3fca3c834f885dfead1787b307aecd63755bfde5f757256e83fcfa3c4fa0aed06fe8675d28e04a37c6d6f6d31397a11ba03f53e9d53808c575704d8a90aba2e1116a6d64a162277c"], 0x0) 18:37:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:25 executing program 2: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000240)={{0x12, 0x1, 0x428, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim={0x0, 0x24, 0x1b, 0x81, 0x0, 0x20, 0x1, 0x7e94, 0x2}, @obex={0x0, 0x24, 0x15, 0x6}, @dmm={0x0, 0x24, 0x14, 0x728, 0xde}, @ncm={0x0, 0x24, 0x1a, 0xf801, 0x40}, @ncm={0x0, 0x24, 0x1a, 0x8, 0x5}, @call_mgmt={0x0, 0x24, 0x1, 0x1, 0x1}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x186}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xfffffffffffffe67}, 0xfffffffffffffe47, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x16a6, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x0, 0x0}]}) 18:37:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) 18:37:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 361.064920][T12350] usb 3-1: new low-speed USB device number 2 using dummy_hcd 18:37:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x10001, 0x4) 18:37:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00000000000000fbfffffffeffffff0700000000000000060000000000000000000000000000000000000000000000000000000000000009000000ff0300000600000000000000010400000000000006000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5a714183556eec63a5a371009a6addf3230e4c1a4c533d0236f90e60d2daf8288cb04470e3cc54e083c1091516a79691a34b49f3a491317b56774fceef1c7511657c225229eddbebb35df3b1a251008b6b81fd16f59449a3bfd3ccd040d3c622ba2e4e1d1e5adcd3f18591ffaf6d446"]) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x9, 0x2, 0x1800}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x88) r3 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x7f, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x9) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r4, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r5, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/mnt\x00') getpgrp(r6) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000000100)='ns/mnt\x00') r8 = getpgrp(r7) r9 = syz_open_procfs(r8, 0x0) ioctl$DRM_IOCTL_GET_STATS(r9, 0x80f86406, &(0x7f0000000140)=""/79) fcntl$setflags(r9, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000300)={r10}) [ 361.485213][T12350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.586674][T12350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.597306][T12350] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 18:37:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20000) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev\b\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 361.896968][T12350] usb 3-1: string descriptor 0 read error: -22 [ 361.903508][T12350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.912774][T12350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.986558][T12350] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 362.191521][T12479] usb 3-1: USB disconnect, device number 2 [ 362.972809][T12350] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 363.393088][T12350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.473182][T12350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.483610][T12350] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.733133][T12350] usb 3-1: string descriptor 0 read error: -22 [ 363.740475][T12350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.749748][T12350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:37:28 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x9, 0x0, "d6077dafb1e01ae68b9712c56c07d6370684c441012577d0d76ced478d3b2d0381bc4cdf003656e916cb69d35e452ed9b5ad083aeb48246a990c9a3b0a07fc9f356197848ab2d7b4d56939d99f2b7054"}, 0xd8) 18:37:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:28 executing program 0: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x24000) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @data}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0xd9c688e7436a7f99) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000000c0)={0x54, 0x7f, 0x4, {0x4, 0xffc0}, {0x7, 0x3ff}, @const={0x3ff, {0x800, 0x5, 0x1, 0x7}}}) write$evdev(r3, &(0x7f0000057fa0)=[{}], 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r5, &(0x7f0000057fa0)=[{}], 0x10) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x2000, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r7, &(0x7f0000057fa0)=[{}], 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000100000000080000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="00000000010000000000000000000000000000000000000000000000aec1a2c91e889f88e59160097d2da4870cfe2bea0d4d9fec6a6b2889cd38562617bcf1de652cca5e8ad6c264c185796855d8cbb4a8799e3e9642ea7353423e75600ff028012b32d86ec6c4e7ad6243cf771ba41fa1c8aa59a98df7", @ANYRES32=r3, @ANYBLOB="000000000100"/28, @ANYRES32=r5, @ANYBLOB="0000000038d94d7e00"/28, @ANYRES32, @ANYBLOB="000000000400"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00?\x00'/28, @ANYRES32=r6, @ANYBLOB="00000000010400"/28, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28]) 18:37:28 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000040)={0xb0c, 0x3, 0x1}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x80081) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000000c0)="de04012c084cc0ff5066ae48d07916cf08585471a35389", &(0x7f0000000100)="3f7483550a0b6619cd4b923bc510881206a9d7d713e6dde241ab08374cb25862f97739ecd9232fb17459f893"}, 0x20) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000000180)="d898edb30a263f57708ac2480dcb74e579fa0b3f580a9937012e0d") epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) r3 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x35f5, 0x42200) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000002c0)={{0xa, 0x7, 0x0, 0x9, 'syz0\x00', 0x40}, 0x5, 0x400, 0x1, r4, 0x4, 0x7fffffff, 'syz1\x00', &(0x7f0000000240)=['\\em1md5sumselinuxsystem$#vboxnet1@vboxnet1em1#vmnet1\x00', 'self!-$(-self,\x00', 'eth0security\x00', '/dev/admmidi#\x00'], 0x5f, [], [0x7, 0x3, 0x8, 0x20]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb791) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x82008988}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x20) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000600)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)=0x0) stat(&(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000a40)={&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000006c0)="bdda5d6a1b783cff73f79d5d6c7ddaca4dad44142b7b430bcd76f9e8f3166426d829f9237513c993b6a7c214f7e381df200e91376d9d44cdb7eb17db6e14673a5ae76a17f95e6579a20db748b4d9fa1e95ea1d44ce08c1c32f655040800246a6b9244610b36f6155c827cce098178cc7f8572a", 0x73}, {&(0x7f0000000740)="e1365de9bd00a83fb8192797a129510dfcb9af8c7c37212b1a3c3b8c8c1457832837c7ef231d6e2577f1f52bc6327f8aa635e67352a7fcc6b37665f8f82042c01f50b851e72fddc6e52da860eba7dd98e38991afcbada6004ff90c1df288ca61d7ad0581fdf07aba2360adecf7df6ae6baec9f36023d08603ad72b99e70b7c1ad3f1c210a60249c81a87116a1dbd223bc8aeab9a99038f77db19b11826411a7aa748d66ae26bfe43120ba3e576e5381fe7b4e16421fc4e6b93318b3311d890a4dc20583c3a3dd8d3c78be22fed731e4c67e8f5d9c5938636d9f7bb3a68b00a98dd0a925672bdfe0b81e6f2958fd44c0e0e25e47930acee48", 0xf8}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x10}, 0x24008084) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000b00)=0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r12, &(0x7f0000000b80)={r13, r2, 0x101}) r14 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r14, &(0x7f0000000bc0)=@xdp, &(0x7f0000000c40)=0x80) socket$key(0xf, 0x3, 0x2) [ 363.820549][T12350] usb 3-1: can't set config #1, error -71 [ 363.865273][T12350] usb 3-1: USB disconnect, device number 3 18:37:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:29 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x41}}, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x3, 0x8000, 0x40, 0x3, 0x11, 0x8, 0x9, 0x3f, 0x1f, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c03110000001900154001000000000022dc1338d54400009b84136ef75afb83de4411001600", 0x48}], 0x1}, 0x4000) r2 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:37:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 364.176519][T12689] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 18:37:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 364.278912][T12692] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 18:37:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x81) 18:37:29 executing program 2: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x10000) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) fdatasync(r0) 18:37:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 364.675373][T12706] IPVS: ftp: loaded support on port[0] = 21 18:37:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ac00000000000600000000000000ff7f0000000000000300000000000000001c00000000000000000000000000000000000000000000316d0000000400003dae000000000000e60000000000000006000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000005f931e200"/446]) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/mnt\x00') sched_setparam(r1, &(0x7f0000000040)=0x2) 18:37:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = syz_open_procfs(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000001c0)={0xffff, 0x0, 0x4, {r3, r4+30000000}, 0xfffffff8, 0x5}) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000002, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff7f, 0x8000204087ffd, 0x0, 0x138) recvfrom$inet(r0, 0x0, 0xffffffffffffffda, 0x10120, 0x0, 0xffffffffffffff73) 18:37:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 364.918681][T12716] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:37:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x104800) syz_open_pts(r1, 0x101000) [ 365.091274][T12706] chnl_net:caif_netlink_parms(): no params data found [ 365.242196][T12706] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.250110][T12706] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.259997][T12706] device bridge_slave_0 entered promiscuous mode [ 365.299944][T12706] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.307346][T12706] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.317925][T12706] device bridge_slave_1 entered promiscuous mode [ 365.362263][T12706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.377581][T12706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.414132][T12706] team0: Port device team_slave_0 added [ 365.426128][T12706] team0: Port device team_slave_1 added [ 365.549261][T12706] device hsr_slave_0 entered promiscuous mode [ 365.705501][T12706] device hsr_slave_1 entered promiscuous mode [ 365.792810][T12706] debugfs: Directory 'hsr0' with parent '/' already present! [ 365.827354][T12706] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.834685][T12706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.842433][T12706] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.849743][T12706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.944361][T12706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.969888][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.983890][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.996591][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.011689][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 366.034838][T12706] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.065068][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.075201][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.084589][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.091777][T12479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.100778][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.110485][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.119617][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.126867][T12479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.135452][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.150694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.171837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.183534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.202048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.211707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.221810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.244141][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.253733][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.263225][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.272865][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.287624][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.325960][T12706] 8021q: adding VLAN 0 to HW filter on device batadv0 18:37:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:31 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x280180, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="595fbf89d8fdb66107beddac8a3024d70c77b17288a2b9bdc4d80c5559c469a8b8fd2ae99690017cbf3ecdd65160fbe7c006b919db497611768870837947882284a0f63ae2e9fd6d18d1ef659c85f7899066ad6609f77cef049f284ef16b72981f3b647943a4b51d4666656f11b04dc05ef9eeddedead647d92de48a4270d32fcfff71e65f48b4fd58617bed32ce57650036eb4f46095cd56bc409b03474cd3c4279315b1fbfbfba0ebc04983b2517132cc5970a0a055d3b5d6b1dd2d8c30c6ffda5fd8beea56f10b2ba1090eb054ea1f141f56516cc3d0b7f8f024545d95aec55377777a03630df5b8414cf28ca7b5867fc68b5197cca", 0xf7) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x1) 18:37:31 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x9}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x414, &(0x7f0000000000)=[{&(0x7f00000000c0)='P', 0x1}], 0x1}, 0x4000) 18:37:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/cachefiles\x00', 0x2000, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/capi/capi20ncci\x00', 0x100, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="89519e0410224de479b30a1ce2da3744fb41bcdbb08f5683fa2d3fd6175558475df64202bd188eb728db3eda41c5c73ab985154e208a8a06000000000000005b04aa199a68706229c35acd4ac94a19e964fab3ef9a07c81fe9", 0x59) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20200) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x6) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xf0adb2b139a45a09) sendto(0xffffffffffffffff, &(0x7f0000000280)="18a48328469850022fb4de3ad8d5ce9436a9ba4f9019dc9bde6123c2526efa2dfe86b07b2704ba08c4e544c72b45ab516723796052c3ac50bb9a53b026bced9371e81ab3517253a6dd6965e142d1c53e757c3b0ac47f818343acbfa61be41a56f7212cc72442669e22a942790bad929e8f30f422bd7b122755278b889a0fe90c243a04b638a1ad2c08ea231989ca05c5beaa77c7adf97b319f3653e1c79059e8b04cda831ace09cabbda49b2c1b38122911f6c0fe824133cd447a7031b30bfe3cb59590ad47d7845cc4c39d4780ca7caf9", 0xd1, 0x20000000, &(0x7f0000000080)=@isdn={0x22, 0x9, 0x4, 0x8}, 0x80) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4) read(0xffffffffffffffff, &(0x7f00000004c0)=""/135, 0x87) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000480)={0x101, 0x1, 0x200, 0x4e, 0x15, 0x8, 0x0, 0x4, 0x0, 0x540, 0x3f, 0x4}) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x78, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 18:37:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r2, &(0x7f0000057fa0)=[{}], 0x10) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0x1f) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) 18:37:32 executing program 2: syz_usb_connect(0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x0) 18:37:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:32 executing program 3: semget(0x3, 0x3, 0x1) r0 = socket(0xa, 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x80400, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[r0]}, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r2, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3d8, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5804}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}]}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x36841dc2}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffd1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, 0x1fc0000}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x1}, 0x8800) 18:37:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 367.498514][T12764] MTU too low for tipc bearer [ 367.552995][T12770] MTU too low for tipc bearer 18:37:32 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x10) r1 = dup(r0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r2, &(0x7f0000057fa0)=[{}], 0x10) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x4, 0x9b5]) 18:37:32 executing program 3: syz_usb_connect$cdc_ecm(0x4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000220000402505a1a440000102030109023b000101000000090459a10002060000052406000005240000000d24abbf5a0e9b5b23f4b50f8e640000000000000000090582020000000000"], 0x0) 18:37:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) r2 = socket(0xa, 0x3, 0x2) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:33 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xa4a1, 0x100}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x81, 0x7, 0x20, 0xfffffff7, 0x10}, &(0x7f0000000100)=0x98) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001880)='IPVS\x00') fcntl$setflags(r3, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x108, 0x0, 0x108, 0x0, 0x108, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, &(0x7f00000014c0), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x267, 0x9, 0xe8, 0x1, 0x4a5, 0x32, 0x9, 0x8]}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0xe}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffff00, 0xffffffff], [0xffffff00, 0xffffff00], 'sit0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x47, 0x8, 0x3, 0x1}, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x18}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001440)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000007114497570663f888a4e1fa4ec3329293f783954c71ea62b56f73a4f5ca1db44200ad6a640d801c3571b6d7ab5f2708dbad0f775b024a803a6090c815200d15db8c32b50e359843800ad10e48fea8d27373f37b93787593195be9bb93758234f8276"], 0x9) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000012c0)={r5, 0x1000}, &(0x7f0000001300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001340)={r2, 0x400, 0xe6, 0x3, 0x1ff, 0x325, 0x0, 0xd8, {r6, @in6={{0xa, 0x4e23, 0xe9, @rand_addr="7573ce3030865df07377002a4b6e532b", 0x8000}}, 0x3f4, 0x20, 0x81, 0x4, 0x3}}, &(0x7f0000001400)=0xb0) fcntl$setflags(r0, 0x2, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000000c0)={0x0, 'syz0\x00'}) r7 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffffbff, 0x101000) ioctl$TIOCSCTTY(r7, 0x540e, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) ioctl$TIOCSBRK(r7, 0x5427) 18:37:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:33 executing program 2: r0 = open(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ftruncate(r4, 0x200004) r6 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r6, 0x0, 0x0) fcntl$setflags(r6, 0x2, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r7, 0x0, 0x0) fcntl$setflags(r7, 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r8, &(0x7f0000057fa0)=[{}], 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002780)={{{@in6=@ipv4={[], [], @empty}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) r10 = getpgid(0x0) r11 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r11, &(0x7f0000057fa0)=[{}], 0x10) r12 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r12, &(0x7f0000057fa0)=[{}], 0x10) r13 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r13, &(0x7f0000057fa0)=[{}], 0x10) r14 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r14, &(0x7f0000057fa0)=[{}], 0x10) r15 = socket$inet_udplite(0x2, 0x2, 0x88) r16 = gettid() syz_open_procfs$namespace(r16, &(0x7f0000000100)='ns/mnt\x00') fstat(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup(r18) getsockopt$IPT_SO_GET_REVISION_TARGET(r19, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000002b80)='/dev/radio#\x00', 0x2, 0x2) r20 = openat$zero(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/zero\x00', 0x100000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r20, 0x29, 0x22, &(0x7f0000002bc0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffff7) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r19, &(0x7f0000000140)='./file0\x00', r21, r22, 0x100) r23 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r23, &(0x7f0000057fa0)=[{}], 0x10) r24 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r24, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r24, 0x0, 0x0) fcntl$setflags(r24, 0x2, 0x0) r25 = openat$cgroup_ro(r24, &(0x7f0000002e00)='io.stat\x00', 0x0, 0x0) r26 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r26, &(0x7f0000057fa0)=[{}], 0x10) pipe(&(0x7f0000002e40)={0xffffffffffffffff}) r28 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r28, &(0x7f0000057fa0)=[{}], 0x10) r29 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r29, &(0x7f0000057fa0)=[{}], 0x10) sendmsg$netlink(r7, &(0x7f0000002f40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x2588, 0x3a, 0x1, 0x70bd27, 0x25dfdbff, "", [@generic="e18f468c58993c7a41575ba108ab9aff4a7a6a21a2a7a4d98233dcfb1fe98e36668ee48526c00e8423476a7aba1a37742753b90442e6ad724d500146fae434afa1c2477dd6d5728214754ba85c525d5c9af2711cf409ca0f79f3e0280da0296e1293f09c7294a326ab52939004d21dfdd949898e3c5b60e4386c8750b1e0a47458cf3f9a36f2b7bdd84f8f7c747f6a1a82f168cd26031f47471fa789c8016602177979f15843ec961e665c15340018a2c6f069ffcab765834d6507362a061f13e1", @nested={0x11c, 0x64, [@generic="f7a1599abb243737ef70c1a51d26058af26da01d29cd2cd339f6e4f62911b91989dbc43f43502d6292f1bea0cec92d080a4f499b1fedf2f8938dd9f231ed443f15f9566974fa2b3fba126e5a8540f070b3a7f47cffca9997a30fe25586efd4fcee34bd51d3", @generic="a845446374c5cacc401a5d699b3c25ae6a780a81ad4349da5060b4d4cb1e5edb0959042c999adab80651a37973eaab6792e996ea6d6a6fbe5827e9ba2140e7630a4be223d4c815922468ff95fff6c884586ce33c01a772ecf5", @generic="5fa329155af21a71b57cbb3490b4a2913994ef30b44400131d34a8f574274267c51fa2ad51a02c989fa7275f7a5ef12856f64b8c95b6cdfee242", @generic="cf33f4", @typed={0xc, 0x8, @u64=0xffff}, @typed={0x8, 0x2b, @ipv4=@rand_addr=0x18000}, @typed={0x8, 0x21, @u32=0x6}]}, @generic="472b883194d78220af2e9d8facf5bed0b436cd1cc4b024c199d3e8230861a1377c3aa9685b944cd383c92943b5ad0c1910cc72c3e4515595943a3b94a800e7c126124e0488934da4aa963c94c8c0fcf800d6025eeba0d1bf69a1c63f22956311aab67545d44684f53be264a150eef4dd0c4d0f", @nested={0x1240, 0x75, [@generic="4906c50d2318d0066b3f43cfad5bdc27e8b9fb0a6a05de318d03ee6cd1299618fca62000eacd752ee700251886ee103c84aab1e4397f547a06fd5db5959d9554fab5bc1441f5c6d8eb32382b31975ccb", @generic="87e7f69b056b6a93a28ba8438bc4ccf5a50eb33aef63bddda84432230dfffbd805d25beb7daa227c908adcd26c146afe0613508fe07820b62b077a008bcc517211e2edb5e23d8956da35bda28d85d1cc059cd715c1ba4d27907541bec386d86f6cab6a0d79ba525d7637ca60df7a39ed4ac357ba0d630faf1e1500d4eb501524b8040da4", @typed={0x8, 0x5c, @u32=0xfff}, @typed={0xac, 0x65, @binary="97908f5165c8e4a05a867466ef89581d50b88d75b05df28c4908f24655c36537318f245f6e53687b44cb360b83e90bc478640e67658375878c75d6de3ecd85fe61365a822959eefa0fc8c1b92b6a2a6783272f1243cdd06ac1e576bcb5dd7f58b795e218c66023199ba000c55d94312d5bc23a64ddf3cb329caddd57888902e2a22eeee250972825f06c1ff16e5ce6c45ca2ef2b8c49d36e08b25217f1b7cc43988cb71750a63fe9"}, @generic="7f318af9a2568217dd08c8afec97242e345aa968b22fe8f4eec882b3eb4222ef12ef99004e51ce65a7ab10e1f5886b82dbd4468c6551ec2809524385687eaf5b16107ddbdcbd5e9740acea99e526770ca94a44917bedb86325bfb0288c75df27e9e7a2a37d49cf0dcafacd2478ed2d093e90323f062a6ac95ae7744144e1df9c2c82ea6c651ff2b636ad72dbfbc9e976cc4717b2ccc17164e56ac46f15584b", @generic="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", @generic="7419f3d877d158e87f0dda", @typed={0x8, 0x34, @str='\x00'}]}, @nested={0x1008, 0x45, [@typed={0x1004, 0x4, @binary="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"}]}, @generic="ae9607e5f761811f8d9158b5badeecbc2c71ccc8a58dded020af6891b32abf8618c67ff6f2e7c73cd4b5ee9ffe9591e081b5aeda8fe559ba866052f185c50b20c9f82eddc5422b3d33dca4a53fa3e43819542fe2acd23b5d495b82b45636390b2cd1b333bac51cf2c18e4f98d0b985e7682cf0e1b34e27c7e789e40e9bc6f38bf18fbae8da48d31eec2fbcc3a122762ae630cfb50dec67ee81fe6f9cbd1886852c76334b663ef1edc3a39d83445185dd00c511c3571f666d91117772e7bd42259c430a304b8d1c97b267bdf956a082c947c1e912236d13a390e21a", @typed={0x4, 0x8a}]}, 0x2588}, {&(0x7f0000002880)=ANY=[@ANYBLOB="000100001a0043002dbd7000fbdbdf2508005000", @ANYRES32=r9, @ANYBLOB="e80045005a532b978d0646c82c3467ddb476013ea6ba1f8363302c0400040008008d00", @ANYRES32=r10, @ANYBLOB="040051000400800038d24a1a131470244e8f7b13368a4ff402dbc77506769e5a4052a29f1599c915ad16e4e90b18afb239060f0c751aa13807dd0c03563054f544e87ef966c23351d1b70b891c16135c401fe20be3f7c5ffc4f757bff0bc6d898f5e59bd0dfbbda980d9e9152258e4e7c95c3571bac3dcf80d5e8d6bb29fe32730691128e3e9a36a4bcf9b6e9a6dad0eb7c0d3d562574c66b83c77bfc6d848126514d211bc05fc7461b48dfd09c1bdccbb0e99456e82410042aca7a1005e52192f"], 0x5}, {&(0x7f0000002980)={0xd4, 0x1a, 0x718, 0x70bd25, 0x25dfdbfd, "", [@nested={0xc, 0x59, [@typed={0x8, 0x7a, @u32=0x2}]}, @generic="eacca649f5b9df1da85a94ec4f41333197f4da4af76baeeebf52b7545d67e4abf6e35c8b514c3749295cacd7666d2355d2d05ee6076ea43382dbd13499a23300ed2869c8ffee66f012f2f74780357838e2410a076fbde6c74dbd398986264fb1c0f1e42dee45f5c75cadd5f40fbbd48d087439ae96447c879867a969c5c922463412e342659f7004de9a5d264ccdad1c592f76bf01fe365967f00d30d8fe81bce885c56009491f9155fe906e122d864dd14f611be046"]}, 0xd4}, {&(0x7f0000002a80)={0x10, 0x26, 0x200, 0x70bd29, 0x25dfdbff}, 0x10}], 0x4, &(0x7f0000002ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r12, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1c00000000000000010000000200000014cd61733d55667b5aae05762c1631", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r22, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r23, @ANYRES32=r0, @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r5, @ANYRES32=r29], 0x90, 0x24000008}, 0x4048094) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:37:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:33 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ac889508c71b4110bc780000000109021b000100000000090400"/45], 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x20295049d65c9b8b, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000280)={0x7, 0x81}) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x101, 0x2, {0x8, 0x40, 0x400, 0x3ff}}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x9, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) fsopen(&(0x7f0000000200)='ext2\x00', 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x402000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) 18:37:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/\x00', 0x10800, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x3fe) [ 369.232910][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd 18:37:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x3, 0x1}) [ 369.474206][ T17] usb 4-1: Using ep0 maxpacket: 8 18:37:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x7f, 0x2, 0x1, 0x2, 0x1f, 0xff32}, &(0x7f0000000040)=0x20) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xa00000, 0x34a8, 0x10001, 0x8, 0x1}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={r2, 0x4f, "f9cb9c638bfc33315de40e9f87ab0f07d522f7afa6cc16d52006595ef07ef839a7ae6eec2151985ca1044478c9ccf93d1dac2adc861296fd69deed82fbe0434869faf71fac5f32784b4c3ab4f43080"}, &(0x7f0000000380)=0x57) ftruncate(r1, 0x80000001) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x18b000, 0x6e) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000400)={0x0, 0x12e2}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000480)={r3, 0x4, 0xc4d, 0x7f}, &(0x7f00000004c0)=0x10) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0x80800, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r6, 0xc06855c8, &(0x7f0000000540)={0xb, 0x6, {0x54, 0x80, 0xddc, {0xac67, 0x100}, {0x1, 0x5}, @const={0x0, {0x8001, 0x800, 0x8, 0x8}}}, {0x5, 0xe4, 0x7, {0x0, 0xbff}, {0xfffa, 0x200}, @const={0x6, {0x4, 0x5, 0x9de, 0x100}}}}) write$vhci(r4, &(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, "c041e85e1addc2b4c24792fa449b39ff2b"}, 0x12) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000600)={0x40000000, 0x8, "6e7d7705729b1da3af36840d315fd2eababe8570a7bd325c0bc2c1682731c63a", 0x5, 0xff, 0x4, 0x401, 0x9d8c, 0x1, 0x80000001, 0x2, [0x1, 0xfff, 0x10001, 0x6]}) r7 = syz_open_dev$adsp(&(0x7f00000007c0)='/dev/adsp#\x00', 0x7, 0x201000) sendmsg$inet_sctp(r7, &(0x7f0000001cc0)={&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x3, @mcast2, 0x2cc}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000840)="ee7e63f5f4e0d47cf1462137e3c278", 0xf}, {&(0x7f0000000880)="f5ee3ee6583637d75e24581eb24c343056eaaf45745a7d191cfe53f9f281dc6e21bc7ec387fcbb54f79113ba37ae5e926f33b44ad4099186347d5d5343388c3499ced1f234b5b1a53a15388c522f25ffe72b39744c89d8c454e9001216acf7c42aa95488329239a8d54c8f8c73d104907fb95b436264d3c6dabfb3a39acd6fa7dc3e1f7ca50e355dc0bff6345fea20fbc2da9a03216e05841991da651ae103d18e5807fbca27f082d5dfddd982f78cab2704", 0xb2}, {&(0x7f0000000940)="03fcb08928017c4eb2676b65ff228aa4f7ac7bfd5b76ae053259e36a903ff6ef1cf6bf73031122bdd0a086bc273144f0e3ed07a4ae41ef76940192200231c11f468c15141c72c670adfa46343a3a6924dff7e1b3e5a7d1231fa3fc4f8d13a3b0457932d92c29cdcf441625818f5d6409be9c7e22937916eef173cc679d3da4f095dd05b71464ed661840c5", 0x8b}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="c67b5f0096d345232851016f3b04adce39f82f3b2fdf0f0e9a2991fe0427f74ddc2bb78edf879c3fc04e0c938fa7018a115cfc60eb382d443dfb25a27fb77a9209d37da0e91fb0e0c6bca3c16b3a9215", 0x50}, {&(0x7f0000001a80)="3e8968cf89714597b39ea0e0ec1995c6559a6c2275bccc5535424c41b0c6768fc1b558e9b3d5588240ccee1cac3011d6cf1a34680e06252771ae5bf084a8abea396d73b829cda7", 0x47}, {&(0x7f0000001b00)="505265cb40530c27c3c026eb2778e5aaec32beb0ef463db65b45fd7715498069f9e498a294d226c627", 0x29}], 0x7, &(0x7f0000001bc0)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x13}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x4, 0x7fff, 0xb0, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x19}}, @init={0x18, 0x84, 0x0, {0x1f, 0x0, 0x8, 0x7}}], 0xd0, 0x20000800}, 0x400) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000001d40)) syz_open_dev$cec(&(0x7f0000001d80)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001dc0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001e00)={0x0, 0x6}, &(0x7f0000001e40)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001e80)={r9, 0x5}, &(0x7f0000001ec0)=0x8) r10 = socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$sock_timeval(r10, 0x1, 0xd960ce2a8e98689e, &(0x7f0000001f00), &(0x7f0000001f40)=0x10) r11 = syz_open_dev$vbi(&(0x7f0000001f80)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000001fc0)=0x5, 0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000002040)={0x5, &(0x7f0000002000)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r8, 0x4008642b, &(0x7f0000002080)={r12, 0x20}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/capi/capi20\x00', 0x840, 0x0) r13 = accept4$inet(0xffffffffffffffff, &(0x7f0000002100)={0x2, 0x0, @multicast1}, &(0x7f0000002140)=0x10, 0x0) getsockopt$inet_tcp_buf(r13, 0x6, 0x21, &(0x7f0000002180)=""/113, &(0x7f0000002200)=0x71) 18:37:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 369.594687][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.605183][ T17] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=78.bc [ 369.614671][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.692522][ T17] usb 4-1: config 0 descriptor?? 18:37:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 369.739857][ T17] option 4-1:0.0: GSM modem (1-port) converter detected 18:37:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 369.948312][ T17] usb 4-1: USB disconnect, device number 2 [ 369.955605][ T17] option 4-1:0.0: device disconnected 18:37:35 executing program 2: sysinfo(&(0x7f0000000080)=""/90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x1000, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x3c) 18:37:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='O\xd6-\x8f\'G\xdf\xfcx\x01', 0x500, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 370.428817][T12862] IPVS: ftp: loaded support on port[0] = 21 [ 370.595394][T12862] chnl_net:caif_netlink_parms(): no params data found [ 370.661443][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.668853][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.678220][T12862] device bridge_slave_0 entered promiscuous mode [ 370.690891][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.698276][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.707408][T12862] device bridge_slave_1 entered promiscuous mode [ 370.747086][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.762864][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.786278][ T17] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 370.811277][T12862] team0: Port device team_slave_0 added [ 370.823065][T12862] team0: Port device team_slave_1 added [ 370.907828][T12862] device hsr_slave_0 entered promiscuous mode [ 370.953579][T12862] device hsr_slave_1 entered promiscuous mode [ 370.994648][T12862] debugfs: Directory 'hsr0' with parent '/' already present! [ 371.030325][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.033518][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 371.037636][T12862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.050838][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.058106][T12862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.156553][T12862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.163302][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.163425][ T17] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=78.bc [ 371.163501][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.175195][ T17] usb 4-1: config 0 descriptor?? [ 371.214786][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.227034][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.237035][ T17] option 4-1:0.0: GSM modem (1-port) converter detected [ 371.257224][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.275774][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 371.315624][T12862] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.349936][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.360502][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.367802][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.426550][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.435698][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.442995][T12350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.453864][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.464089][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.479229][ T17] usb 4-1: USB disconnect, device number 3 [ 371.479987][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.486330][ T17] option 4-1:0.0: device disconnected [ 371.494656][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.514610][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.532227][T12862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.583947][T12862] 8021q: adding VLAN 0 to HW filter on device batadv0 18:37:37 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdb4b008501da1601c0300000001090200eec92a00"/36], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x30a, &(0x7f0000000040)={0x0, 0x0, 0xff26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:37:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r2, &(0x7f0000057fa0)=[{}], 0x10) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000001c0)) fcntl$setflags(r1, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x14, 0x200ff, 0x2, 0x8000, 0xbd0, 0x9, 0xfffffff8, {0x0, @in={{0x2, 0x5e24, @multicast2}}, 0xffff, 0xa4ec, 0x7, 0x7, 0x1000}}, &(0x7f0000000100)=0xb0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000300)={0x1, 0x0, 0x189e81e, 0xff, 0x8, 0xc0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x5}, &(0x7f0000000180)=0x8) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, r5, {0xf, 0xffef}, {0xd, 0xa}, {0x7ffe, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 18:37:37 executing program 3: r0 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x100000000, 0x105082) r2 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000080)=""/52) fcntl$dupfd(r5, 0x0, r5) r7 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r7, 0x0, 0x0) fcntl$setflags(r7, 0x2, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4009ff) r9 = open(&(0x7f0000000100)='./bus\x00', 0x140, 0x80) listxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000380)=""/13, 0xd) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, 0x0, 0x80003) 18:37:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x400) fsetxattr$security_evm(r1, &(0x7f0000001140)='security.evm\x00', &(0x7f0000001180)=@v1={0x2, "8e"}, 0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) recvfrom$packet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40002000, &(0x7f0000001100)={0x11, 0xf6, r2, 0x1, 0x3}, 0x14) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:37 executing program 3: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000005}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 18:37:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 372.393082][T12350] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 372.413458][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 372.419665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 372.642792][T12350] usb 3-1: Using ep0 maxpacket: 8 18:37:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) r3 = syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001100)=0xffff) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r4, &(0x7f0000057fa0)=[{}], 0x10) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) write$evdev(r4, &(0x7f0000001200)=[{{0x77359400}, 0x11, 0x7, 0x1000}, {{r5, r6/1000+30000}, 0x3, 0xd831, 0x400}, {{r7, r8/1000+10000}, 0x16, 0x400, 0x9b}, {{0x77359400}, 0x1, 0x9, 0x4}, {{r9, r10/1000+30000}, 0x3, 0x5, 0x4}], 0x78) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000001080)) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000040)={{0x1, 0x1, 0x7, 0x48, 0x800, 0xaf}, 0x6c, [0xabe8, 0x8001, 0xfffffff8, 0x0, 0x6000, 0x3, 0x3, 0x200, 0x6, 0xffffffff, 0x5, 0x1, 0x7, 0x2, 0x6, 0x81, 0xfff, 0x0, 0x3000000, 0xd3b, 0xffffffff, 0x3, 0x2, 0xef, 0x0, 0x80, 0x1, 0x4, 0xc0000000, 0x2, 0x4, 0x6, 0x46, 0x42e5, 0x40, 0x5, 0x0, 0x3, 0x17725778, 0x8, 0x800, 0xdda0, 0x8000, 0xa9, 0x100, 0x6, 0xfff, 0x1, 0x0, 0x7fffffff, 0x4, 0x6, 0x7fff, 0x7, 0x0, 0x4, 0x9c3c, 0x100, 0x2, 0xffff, 0x3a4e, 0x7c3, 0x1, 0x7, 0xff, 0x2, 0x8000, 0x1, 0x5, 0x5, 0x4, 0x4, 0x0, 0x7ff, 0x4, 0xc6, 0x4, 0xfffffffa, 0xffff, 0x1ff, 0x9, 0x4, 0x1, 0x7f, 0xfffffffe, 0x5, 0x6, 0x8000, 0x800, 0x86c, 0x9, 0x7, 0x4, 0xca1defa, 0x8001, 0xea, 0x5, 0x1ff, 0x7, 0x93c7, 0x5, 0x2, 0x2, 0x10001, 0xff, 0x4, 0x7, 0x5, 0xffffffff, 0x2, 0x7, 0x1000, 0x9, 0x3, 0xfffffff9, 0x8, 0x80000000, 0x101, 0x20, 0x80000001, 0x84, 0x7, 0xe69, 0x69, 0x6, 0x6, 0x9fb8, 0xbe69, 0x8000, 0x3, 0x40, 0xfff, 0x0, 0x200, 0xffffd00d, 0x7, 0x9, 0x1354, 0x0, 0x3, 0x48, 0x3, 0x8, 0xffffffff, 0x3, 0x800, 0xb67, 0xffffffff, 0xd5d, 0x6, 0xff, 0x7, 0xfffffffc, 0x40000, 0x3, 0x8001, 0x7fffffff, 0x401, 0x1, 0x2, 0x1, 0x3, 0x5, 0x4, 0xfffffff9, 0x4, 0x1, 0xfe, 0x2, 0x51cf, 0x3, 0x1, 0x3e, 0x4, 0x8001, 0x702, 0x5, 0x10001, 0x1, 0x3, 0x10001, 0x40, 0x4, 0x9, 0x6, 0xc0a, 0x1, 0x0, 0x5dd2783e, 0x7, 0x2, 0x2, 0x1, 0x1, 0x8, 0x0, 0xcff, 0x9e, 0x5, 0x3, 0xc3d, 0x7, 0xfffffff9, 0x9, 0x800, 0x932, 0x5, 0x4, 0x5c98ccca, 0x3ff, 0x7, 0x9, 0x3, 0x4, 0x7, 0x0, 0xfa0, 0x1, 0x5, 0x64, 0x3c1, 0x6, 0x2, 0xf2, 0x7, 0x1000, 0x7f, 0x4, 0x3, 0x2, 0x3f, 0x634, 0xffffffff, 0x1, 0x7, 0x800, 0x6, 0x7, 0x2, 0x1, 0x3f22, 0x5, 0x4a, 0xf7, 0x2, 0x7ff, 0x101, 0x81, 0x7fffffff, 0x4, 0x0, 0xdbd, 0x6, 0x4, 0x1, 0x0, 0x6b, 0x6e5, 0x2, 0x6b, 0x2, 0x81, 0x20, 0x1, 0x1f, 0x6, 0x6e7, 0x1, 0x100, 0x6, 0x2, 0x9, 0x8, 0xffffffff, 0x2, 0xfffffffe, 0xc32, 0x6b22, 0x8, 0x4, 0x3ff, 0x0, 0x4, 0x5, 0x8000, 0x0, 0xbb40, 0x401, 0x7fff, 0x20a, 0xfffffbff, 0xe1ea7b6, 0xd0, 0xa2, 0x2, 0x7, 0x7fffffff, 0xe34, 0x1, 0x3598, 0x10000, 0x0, 0x7, 0xffffffff, 0xe42, 0x2, 0x2, 0x100, 0x20, 0x1, 0x1, 0x8, 0x2, 0x9, 0x6, 0xffffff80, 0x800, 0x5, 0x1000, 0x0, 0x1, 0x7fffffff, 0x1, 0x4, 0x3, 0x2, 0x1, 0x834, 0x101, 0x100, 0x4ec, 0x800, 0x80, 0xf4be, 0x3f7, 0x1, 0x8, 0x5, 0xf26a, 0x7ff, 0x100, 0x5, 0x7, 0x4, 0x800, 0x1, 0x8, 0x7, 0x80000000, 0x4, 0x5efb, 0x8, 0x7f, 0x0, 0xa7, 0x76, 0x7ff, 0xfffffe01, 0x100, 0x0, 0x2, 0xfffffbff, 0x400, 0x101, 0x81, 0x4, 0x8, 0x81, 0xdc1a, 0x80000001, 0x4, 0x9, 0x4, 0x3f, 0x8, 0x101, 0x101, 0x0, 0x3, 0x7, 0x2, 0x164c, 0x5, 0x8, 0x6, 0x3, 0x3ff, 0x8, 0x800, 0x7, 0x7, 0x81, 0x5, 0x6b, 0xee, 0x147b, 0x9, 0x5, 0x80, 0x9, 0x7, 0x0, 0xffffffff, 0xff, 0x7796e020, 0x3, 0x2, 0x8001, 0x4, 0xffff, 0x101, 0x4, 0xfff, 0x9, 0x7, 0x401, 0x2, 0x80000001, 0x2, 0xb4b, 0x7ff, 0xfff, 0x3ff00000, 0x3, 0x6, 0x6, 0xfffffffb, 0x5, 0x0, 0x0, 0x10001, 0x8, 0x8000, 0x8, 0x8, 0x0, 0x7, 0x1, 0x0, 0x7ff, 0x7fff, 0x7, 0xfffffffe, 0x4, 0x5, 0x799, 0x7, 0x6, 0x8, 0x3, 0x2, 0x3, 0x20, 0x800000, 0x1, 0x2, 0x5, 0x0, 0x6, 0x10000, 0x7, 0xfffff800, 0x7, 0x84, 0x80000001, 0x7, 0x401, 0x5, 0x10000, 0x3, 0x9, 0x5, 0xfffffff8, 0x80, 0x0, 0x1, 0x4, 0x40, 0xe6, 0x10000, 0xfc9, 0x5, 0x4, 0xff, 0x6, 0x1, 0x544, 0x0, 0x6, 0x20, 0x8, 0x3, 0xfff, 0x8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x5, 0xc6a8, 0x7, 0x3, 0x8, 0x2b68adaa, 0x8, 0x6, 0xff, 0x0, 0xdc99, 0x1ff, 0x80000001, 0x80, 0x3, 0x97, 0x9ff, 0x8, 0x7, 0x3f86d619, 0x5, 0x7fffffff, 0x1ff, 0x8001, 0x0, 0x3, 0x6, 0x1000, 0x4d2, 0x5, 0xe8b, 0x3, 0x9, 0x20000, 0x8, 0x7fffffff, 0x66d1, 0x7, 0x3, 0x5, 0x58fb37dd, 0x200, 0x57, 0x9, 0x24, 0x4b8, 0x1, 0x6, 0x3f, 0x4, 0x9, 0x6, 0x5, 0x4644, 0x5, 0xffffff81, 0x1200000, 0xff, 0xfffffffe, 0x8, 0xce0, 0x5, 0x3, 0x800, 0x7fff, 0x5, 0x81, 0x2, 0x1, 0x9, 0x3f, 0x3, 0xef2, 0x1, 0x7, 0x5, 0x1ff, 0x2, 0x2, 0x3, 0xfffffff7, 0x8a87, 0x8, 0x7, 0x20, 0x3, 0x7ff, 0xfff, 0x8ec5, 0xfff, 0x6, 0x7f, 0x1000, 0xf7c, 0x7ff, 0x7, 0x0, 0x7fff, 0x1, 0x1, 0x10000, 0xc2e5, 0x6, 0x9, 0x2, 0x0, 0xd1a, 0x20, 0x6, 0x1ff, 0x7, 0x1, 0x1000, 0x1, 0x4, 0x84a, 0x3, 0x2, 0x651, 0x20, 0x7, 0x9, 0x80000000, 0x0, 0x2, 0x7fff, 0x3, 0x0, 0x4, 0xd878, 0x7, 0x6, 0xfffffffc, 0x10001, 0x101, 0xfffffff9, 0x35a27f6d, 0x4, 0x7fff, 0x5, 0x7, 0x2, 0x10000, 0x16c0, 0x2fc, 0xb8, 0x6, 0x10000, 0x2, 0x0, 0x4, 0x9, 0x8, 0x5, 0xdc8, 0x6, 0x0, 0x7f, 0x5, 0x9, 0x26, 0x2, 0x8, 0x80000000, 0x2, 0x7fffffff, 0x1ff, 0x7, 0x1000, 0x3, 0x286, 0x1ff, 0x7fffffff, 0x8, 0x2, 0x2747, 0x10, 0x15c, 0x0, 0x800, 0x4, 0x6, 0xfffff5b5, 0x41, 0x9, 0x8d3, 0x7, 0x5, 0x5, 0x3, 0x7, 0x2, 0x3, 0xffffffff, 0x5, 0x3, 0x8000, 0x3, 0x947, 0x5, 0x3, 0x10000, 0x2599, 0x4, 0x0, 0x3, 0x81, 0x6, 0x20000000, 0x0, 0xfffffff8, 0x137, 0x200, 0x3, 0x10001, 0x6, 0x9a4d, 0x8001, 0x9, 0x967, 0x2, 0x7, 0xfffffff8, 0x1, 0x80000001, 0x5, 0x6, 0x400, 0x6, 0xffffff88, 0x305, 0x20c, 0x80, 0x2, 0x9, 0x1, 0x2, 0x9, 0x5, 0x80000000, 0x8, 0x9, 0x2, 0x4, 0x9, 0x1, 0x6, 0x6, 0x2c7, 0x3, 0x3, 0x3, 0x5, 0x6, 0x7fffffff, 0x2, 0x3, 0x80000000, 0x0, 0x7, 0x3, 0x1, 0x400, 0x2, 0x7, 0x4, 0x80000001, 0x8, 0x4, 0xff, 0x2, 0x5, 0x3, 0x8, 0x8001, 0x1000, 0x40, 0x837, 0x1, 0x7, 0x20080000, 0x77a, 0x800, 0x81, 0x5, 0x5, 0x2c87, 0xfff, 0x4, 0x10000, 0x1, 0x5, 0x8000, 0x2, 0xffff, 0x7fc0000, 0x5, 0xfffffffb, 0x5, 0x7, 0x2, 0x8, 0x3ff, 0x94, 0x3, 0xeb, 0x4, 0x3ff, 0x4, 0x8, 0xff, 0x0, 0x2, 0x8, 0x8001, 0x3f, 0x3, 0x41, 0x8, 0xd60f, 0x20, 0x9, 0x2, 0x1, 0x4, 0x52b4af24, 0x7fff, 0x9, 0x7e9a, 0x3f, 0x8, 0x9, 0x3, 0x7, 0xd7, 0xff, 0x20080000, 0x6, 0x3ff, 0x5, 0x1f, 0x0, 0x7fffffff, 0x9, 0x6, 0x9, 0x1, 0x80, 0x33b, 0x0, 0x5, 0x8, 0xab, 0xce, 0xffffffff, 0x0, 0x1, 0x2, 0x9, 0x2, 0x52c7, 0x4, 0x9, 0x4, 0x88, 0x9, 0x0, 0x100, 0x7ff, 0x200, 0x1, 0xeba, 0x4, 0x9, 0x3, 0x80000001, 0x5, 0xe2ca, 0x98e, 0x9, 0x101, 0x4, 0x4, 0x9, 0x6, 0x800, 0x3, 0x1, 0x80, 0x20, 0x7a, 0xffff, 0xc23e023, 0x4, 0x8, 0xd1, 0xfffff2b4, 0x3, 0x1, 0x3f, 0x200, 0x9, 0x9, 0x3ff, 0x3e47, 0x0, 0x3, 0x0, 0x6, 0x4, 0x3000000, 0xb6, 0x1, 0x6, 0x4, 0x1f, 0x5, 0x8, 0x2, 0x7, 0x4, 0x2, 0x3, 0x3, 0x7fffffff, 0x4, 0x7fff, 0x539, 0xb35, 0x2, 0x8, 0x7, 0x6, 0x6, 0x7, 0x3, 0x8, 0x200, 0x2, 0xc042, 0x505d, 0xf78, 0x5, 0x7, 0x1, 0x1, 0x7, 0xfffffc01, 0x95, 0xbe, 0x7, 0x6, 0x6, 0x8, 0x3, 0x51aa, 0x4, 0x0, 0x7f, 0xfff, 0x6, 0x8, 0x5, 0x1, 0x3f, 0x4, 0x101, 0x3, 0x40, 0x27, 0x0, 0x3, 0x6, 0x2, 0xfffffff8, 0x101, 0x2, 0x8ac, 0x8001, 0x27add52b, 0x5, 0x5, 0x3ff, 0x52c6, 0x4, 0x6, 0x10001, 0x0, 0x6, 0xbfeb, 0x7, 0x7e5f3d23, 0x8, 0xd1a9, 0x2, 0x1, 0x6, 0x7f, 0xff, 0x80000000, 0x7fff, 0xc6f, 0x5, 0x6, 0x8001, 0xffffff81, 0x4, 0x8, 0x9, 0x31a0, 0x0, 0xfffff801, 0x9, 0x3, 0x1, 0x2, 0x1, 0x9, 0x1, 0xffff, 0x7, 0x8]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:37 executing program 4: socket(0x11, 0x800000003, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/218, 0xda}], 0x1, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @rand_addr=0x7a6, 0x4e23, 0x0, 'sh\x00', 0x3a8540b07117ef49, 0x7fff, 0x7f}, 0x2c) [ 372.773059][T12350] usb 3-1: config index 0 descriptor too short (expected 60928, got 18) [ 372.781683][T12350] usb 3-1: config 42 has too many interfaces: 201, using maximum allowed: 32 [ 372.790811][T12350] usb 3-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 372.801213][T12350] usb 3-1: config 42 has 0 interfaces, different from the descriptor's value: 201 [ 372.810743][T12350] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c 18:37:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 372.820395][T12350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:37:40 executing program 2: 18:37:40 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/mnt\x00') r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/mnt\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000480)='ns/pid_for_children\x00') clone3(&(0x7f0000000380)={0x44040000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0x2e, 0x0, &(0x7f0000000280)=""/82, 0x52, &(0x7f0000000300)=""/82}, 0x40) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/mnt\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r5, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000440)=0x0) r7 = syz_open_procfs(r6, 0x0) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000140)=""/79) ioctl$VIDIOC_G_JPEGCOMP(r7, 0x808c563d, &(0x7f0000000540)) bind$inet6(r7, 0x0, 0x0) fcntl$setflags(r7, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@local, 0x54e6, 0x2, 0xff, 0x1f, 0x3, 0x3f}, &(0x7f0000000040)=0x20) 18:37:40 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:40 executing program 4: syz_usb_connect(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x40, 0x10, 0x2, 0xbd}, 0x6) 18:37:40 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x30) write$input_event(r0, &(0x7f0000000040)={{}, 0x17, 0x9, 0x101}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x1000, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x2d1b, 0x2000) lseek(r1, 0x0, 0x2) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/10, 0xa) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) fcntl$setsig(r3, 0xa, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000240)={0xf1426ef951af68bf, {0x77359400}, 0x5, 0x7}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$apparmor_current(r5, &(0x7f0000000280)=@hat={'permhat ', 0x4, 0x5e, ['/dev/snd/midiC#D#\x00', 'mangle\x00', 'mangle\x00', 'cgroupem0em0{\x00', 'keyring-security:\x00', '#\x00', '\x00', '/dev/video2\x00']}, 0x6a) ioctl$CAPI_INSTALLED(r0, 0x80024322) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r6, 0x41, "b377ba", "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"}}, 0x110) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) setresuid(r7, r8, r9) r10 = syz_open_dev$mice(&(0x7f0000000700)='/dev/input/mice\x00', 0x0, 0x1802) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000000740)=""/48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={r10, 0x0, 0x0, 0x80, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000800)='/dev/userio\x00', 0x101100, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000840), 0x2) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/cachefiles\x00', 0x80000, 0x0) r13 = socket$inet_dccp(0x2, 0x6, 0x0) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/snapshot\x00', 0x40, 0x0) r15 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/sequencer2\x00', 0x1, 0x0) r16 = syz_open_dev$usbfs(&(0x7f0000001cc0)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff8000, 0x20001) ppoll(&(0x7f0000001d00)=[{r3, 0x1b122}, {r12, 0x2000}, {r2, 0x10}, {r13, 0x8111}, {r14, 0x8208}, {r15, 0x212}, {}, {r16, 0x2}], 0x8, &(0x7f0000001d40), &(0x7f0000001d80)={0x7}, 0x8) 18:37:40 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) fcntl$setflags(r0, 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x484) [ 375.052034][ T17] usb 3-1: USB disconnect, device number 4 [ 375.227582][T12938] FAULT_INJECTION: forcing a failure. [ 375.227582][T12938] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 375.229127][T12936] IPVS: ftp: loaded support on port[0] = 21 [ 375.241020][T12938] CPU: 0 PID: 12938 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 375.241044][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.241082][T12938] Call Trace: [ 375.268568][T12938] dump_stack+0x191/0x1f0 [ 375.273622][T12938] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 375.279644][T12938] should_fail+0xa3f/0xa50 [ 375.284310][T12938] should_fail_alloc_page+0x1fb/0x270 [ 375.289771][T12938] __alloc_pages_nodemask+0x3c1/0x60c0 [ 375.295366][T12938] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 375.301469][T12938] ? arch_stack_walk+0x29a/0x3e0 [ 375.306449][T12938] ? stack_trace_save+0x1b0/0x1b0 [ 375.311716][T12938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 375.317820][T12938] ? kmsan_get_metadata+0x39/0x350 [ 375.322993][T12938] ? terminate_walk+0x56e/0x640 [ 375.327881][T12938] ? kmsan_internal_poison_shadow+0x60/0x110 [ 375.333899][T12938] ? kmsan_slab_free+0x8d/0x100 [ 375.338781][T12938] ? kmsan_get_metadata+0x39/0x350 [ 375.343940][T12938] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 375.349887][T12938] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 375.355832][T12938] alloc_pages_vma+0xc9d/0x18c0 [ 375.360758][T12938] handle_mm_fault+0x515c/0x9f70 [ 375.365771][T12938] do_user_addr_fault+0x905/0x1510 [ 375.370952][T12938] __do_page_fault+0x1a2/0x410 [ 375.375772][T12938] do_page_fault+0xbb/0x500 [ 375.380322][T12938] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 375.385725][T12938] page_fault+0x4e/0x60 [ 375.389900][T12938] RIP: 0033:0x408a9d [ 375.393850][T12938] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 71 51 05 00 90 41 55 41 54 55 53 48 81 ec d8 1b 00 00 <48> 89 bc 24 08 01 00 00 48 89 b4 24 00 01 00 00 48 89 94 24 f8 00 [ 375.413504][T12938] RSP: 002b:00007f34c5788070 EFLAGS: 00010202 [ 375.419681][T12938] RAX: 0000000000408a90 RBX: 00007f34c5789c90 RCX: 0000000000000000 [ 375.427682][T12938] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 375.435679][T12938] RBP: 000000000075bf20 R08: 480b75594570cc50 R09: 0000000000000000 [ 375.443720][T12938] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f34c578a6d4 [ 375.451722][T12938] R13: 00000000004c93a1 R14: 00000000004e0a88 R15: 0000000000000007 [ 375.461821][T12938] syz-executor.1 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 375.471105][T12938] CPU: 0 PID: 12938 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 375.479118][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.489191][T12938] Call Trace: [ 375.492518][T12938] dump_stack+0x191/0x1f0 [ 375.496891][T12938] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 375.502829][T12938] dump_header+0x1e7/0xd00 [ 375.507287][T12938] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 375.513474][T12938] ? ___ratelimit+0x542/0x720 [ 375.518182][T12938] ? task_will_free_mem+0x14c/0x810 [ 375.523417][T12938] oom_kill_process+0x210/0x560 [ 375.528313][T12938] out_of_memory+0x1796/0x1c70 [ 375.533118][T12938] ? mutex_trylock+0x151/0x260 [ 375.537913][T12938] pagefault_out_of_memory+0xdd/0x130 [ 375.543321][T12938] mm_fault_error+0x393/0x5c0 [ 375.548035][T12938] do_user_addr_fault+0xc8b/0x1510 [ 375.553196][T12938] __do_page_fault+0x1a2/0x410 [ 375.557992][T12938] do_page_fault+0xbb/0x500 [ 375.562526][T12938] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 375.567927][T12938] page_fault+0x4e/0x60 [ 375.572097][T12938] RIP: 0033:0x408a9d [ 375.576019][T12938] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 71 51 05 00 90 41 55 41 54 55 53 48 81 ec d8 1b 00 00 <48> 89 bc 24 08 01 00 00 48 89 b4 24 00 01 00 00 48 89 94 24 f8 00 [ 375.595648][T12938] RSP: 002b:00007f34c5788070 EFLAGS: 00010202 [ 375.601740][T12938] RAX: 0000000000408a90 RBX: 00007f34c5789c90 RCX: 0000000000000000 [ 375.609822][T12938] RDX: 0000000020000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 375.617827][T12938] RBP: 000000000075bf20 R08: 480b75594570cc50 R09: 0000000000000000 [ 375.625815][T12938] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f34c578a6d4 [ 375.633805][T12938] R13: 00000000004c93a1 R14: 00000000004e0a88 R15: 0000000000000007 [ 375.642036][T12938] Mem-Info: [ 375.645374][T12938] active_anon:123219 inactive_anon:208 isolated_anon:0 [ 375.645374][T12938] active_file:7527 inactive_file:36823 isolated_file:0 [ 375.645374][T12938] unevictable:0 dirty:88 writeback:0 unstable:0 [ 375.645374][T12938] slab_reclaimable:4648 slab_unreclaimable:13495 [ 375.645374][T12938] mapped:51631 shmem:254 pagetables:991 bounce:0 [ 375.645374][T12938] free:787064 free_pcp:719 free_cma:0 [ 375.683417][T12938] Node 0 active_anon:492876kB inactive_anon:832kB active_file:29972kB inactive_file:147292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206524kB dirty:348kB writeback:0kB shmem:1016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 375.683500][T12938] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 375.683515][T12938] Node 0 DMA free:15904kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.683614][T12938] lowmem_reserve[]: 0 2738 3428 3428 [ 375.683661][T12938] Node 0 DMA32 free:159016kB min:38652kB low:48312kB high:57972kB active_anon:484836kB inactive_anon:36kB active_file:14908kB inactive_file:135280kB unevictable:0kB writepending:308kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:3840kB pagetables:3352kB bounce:0kB free_pcp:1404kB local_pcp:244kB free_cma:0kB [ 375.683773][T12938] lowmem_reserve[]: 0 0 690 690 [ 375.808297][T12938] Node 0 Normal free:12012kB min:9744kB low:12180kB high:14616kB active_anon:8040kB inactive_anon:796kB active_file:15064kB inactive_file:12012kB unevictable:0kB writepending:40kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11136kB pagetables:608kB bounce:0kB free_pcp:2060kB local_pcp:1208kB free_cma:0kB [ 375.838522][T12938] lowmem_reserve[]: 0 0 0 0 [ 375.843189][T12938] Node 1 Normal free:2961452kB min:41492kB low:51864kB high:62236kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.871868][T12938] lowmem_reserve[]: 0 0 0 0 [ 375.876527][T12938] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 375.891580][T12938] Node 0 DMA32: 2*4kB (UM) 4*8kB (UME) 3*16kB (UE) 1*32kB (M) 2*64kB (ME) 1*128kB (U) 0*256kB 1*512kB (M) 0*1024kB 3*2048kB (UME) 37*4096kB (M) = 158584kB [ 375.907440][T12938] Node 0 Normal: 59*4kB (UME) 44*8kB (ME) 4*16kB (UME) 25*32kB (ME) 13*64kB (UME) 18*128kB (UME) 11*256kB (ME) 3*512kB (ME) 3*1024kB (ME) 0*2048kB 0*4096kB = 12012kB 18:37:41 executing program 2: [ 375.924289][T12938] Node 1 Normal: 5*4kB (UM) 7*8kB (UME) 9*16kB (UME) 8*32kB (UME) 10*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (M) 5*1024kB (ME) 4*2048kB (M) 719*4096kB (M) = 2961500kB [ 375.941911][T12938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.951605][T12938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 375.961046][T12938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.971645][T12938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 375.981751][T12938] 44606 total pagecache pages [ 375.986531][T12938] 0 pages in swap cache [ 375.990741][T12938] Swap cache stats: add 0, delete 0, find 0/0 [ 375.996908][T12938] Free swap = 0kB [ 376.000691][T12938] Total swap = 0kB [ 376.004528][T12938] 1965979 pages RAM [ 376.008380][T12938] 0 pages HighMem/MovableOnly [ 376.013170][T12938] 330599 pages reserved [ 376.017379][T12938] 0 pages cma reserved [ 376.021517][T12938] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=12931,uid=0 [ 376.036745][T12938] Out of memory: Killed process 12931 (syz-executor.3) total-vm:72716kB, anon-rss:2212kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 376.057791][ T1832] oom_reaper: reaped process 12931 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 18:37:41 executing program 2: 18:37:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4d4c02, 0x0) r1 = socket(0x5, 0x80000, 0x3f) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r3, 0x205, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40008040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\a\x00', @ANYRES16=r3, @ANYBLOB="08002cbd7000fcdbdf25070000000c00020008000600b3d2392c4800020008000e000006000008000800ffffffff08000600ffff000008000b000e000000080008000180000014000100fe8000000000000000000000000000aa08000b0002000000"], 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x40000000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r2, 0x0, 0xffffffb0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r2, 0x5a, 0x29}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha224-avx\x00'}}, &(0x7f0000000140)="315dd9432b8ca92c799159ee1224ad27a63451464d2650d2af6ac0480d7de0d1d5b5cfcd56dd55e8d09d31a7f290da1e30ae064293030952218662e858f9855d68d2c8d1ed00a2839a0c9e905c8b300a70d8fa23974fc3ab2ecc", &(0x7f0000000200)="b1830cb6ef2aaa16e240fa57b014fbed4c6b1d0149c4f3a6bc35affae1fae617b35d40752382f23704") ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x1c, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) timer_getoverrun(r3) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2000000002) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 376.212880][T12350] usb 5-1: new high-speed USB device number 2 using dummy_hcd 18:37:41 executing program 2: 18:37:41 executing program 2: 18:37:41 executing program 2: 18:37:41 executing program 3: 18:37:41 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xffffffffffffffff) [ 376.594130][T12350] usb 5-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 376.604642][T12350] usb 5-1: config 143 has 0 interfaces, different from the descriptor's value: 5 [ 376.614008][T12350] usb 5-1: New USB device found, idVendor=2040, idProduct=d8e4, bcdDevice=ec.9d [ 376.623216][T12350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.773967][T12350] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 376.783355][T12350] usb 5-1: no configuration chosen from 1 choice [ 377.051757][T12977] IPVS: ftp: loaded support on port[0] = 21 [ 377.211288][T12977] chnl_net:caif_netlink_parms(): no params data found [ 377.259322][T12977] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.266755][T12977] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.275616][T12977] device bridge_slave_0 entered promiscuous mode [ 377.285096][T12977] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.292476][T12977] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.301182][T12977] device bridge_slave_1 entered promiscuous mode [ 377.328526][T12977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.340773][T12977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.376200][T12977] team0: Port device team_slave_0 added [ 377.385895][T12977] team0: Port device team_slave_1 added [ 377.457525][T12977] device hsr_slave_0 entered promiscuous mode [ 377.493488][T12977] device hsr_slave_1 entered promiscuous mode [ 377.563096][T12977] debugfs: Directory 'hsr0' with parent '/' already present! [ 377.587316][T12977] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.594578][T12977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.602270][T12977] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.609590][T12977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.684848][T12977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.701485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.711253][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.720205][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.730182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 377.748580][T12977] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.762468][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.771755][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.779083][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.795710][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.804531][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.811644][T12479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.838323][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.850242][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.865841][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.887081][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.898137][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.911536][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.946111][T12977] 8021q: adding VLAN 0 to HW filter on device batadv0 18:37:43 executing program 4: 18:37:43 executing program 2: 18:37:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r4, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) 18:37:43 executing program 3: 18:37:43 executing program 5: [ 378.227866][T12479] usb 5-1: USB disconnect, device number 2 18:37:43 executing program 3: 18:37:43 executing program 5: 18:37:43 executing program 2: 18:37:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x692c40, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x0, 0x1, 'l'}, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0xff}, &(0x7f00000000c0)=0xc) 18:37:43 executing program 4: 18:37:43 executing program 3: 18:37:43 executing program 2: 18:37:43 executing program 5: 18:37:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x77}, 0x28, 0x3) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r4, 0x0, 0xffffffb0) r5 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='trusted.overlay.nlink\x00', 0xfffffffffffffff8) keyctl$negate(0xd, r4, 0x42b, r5) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:43 executing program 4: 18:37:43 executing program 3: 18:37:44 executing program 2: 18:37:44 executing program 5: 18:37:44 executing program 4: 18:37:44 executing program 3: 18:37:44 executing program 4: 18:37:44 executing program 2: 18:37:44 executing program 3: 18:37:44 executing program 5: 18:37:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f000000a080), 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000000c0)={0x101, {{0x2, 0x4e24, @local}}}, 0x88) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r4, &(0x7f0000057fa0)=[{}], 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r5, &(0x7f0000057fa0)=[{}], 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r6, &(0x7f0000057fa0)=[{}], 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r7, &(0x7f0000057fa0)=[{}], 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r8, &(0x7f0000057fa0)=[{}], 0x10) close(r8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) timer_create(0x5, &(0x7f0000002040)={0x0, 0x13, 0xd, @thr={&(0x7f0000000040)="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", &(0x7f0000001040)="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"}}, &(0x7f0000002080)=0x0) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002100)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000002140)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000002180)) r6 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r6, 0x0, 0x0) fcntl$setflags(r6, 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:44 executing program 3: 18:37:44 executing program 4: 18:37:44 executing program 2: 18:37:44 executing program 5: syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) 18:37:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000040)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5452, &(0x7f0000000040)=[0x1]) syz_usb_disconnect(r0) 18:37:44 executing program 4: 18:37:45 executing program 3: 18:37:45 executing program 5: 18:37:45 executing program 3: 18:37:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x301080, 0x0) write$char_usb(r1, &(0x7f0000000080)="13c937ae33d3720d61573ceffb7f64751f353623244fa213a8c9f00ad7a08ffc7db2940820c50f659ab51218423209803322f4e1594456fa804ac9063ae7df1f8c38dc306e8aaea54e140aa11dda43eb08daa42129b93dd921e361e03da27d75dd9cf1c20e80e46adcfdfe29818e83", 0x6f) 18:37:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000003100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000003000)={0x0, 0x22, 0xf, {0xf}}, 0x0}, 0x0) 18:37:45 executing program 3: syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0x18, 0x3f, 0x8, 0x84e, 0x1001, 0xbd14, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x73, 0x71, 0x49, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) 18:37:45 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x51, 0xf0, 0x94, 0x10, 0x2013, 0x257, 0xa2a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe5, 0x85, 0x8d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "ad03efdbb2daff"}]}}]}}]}}]}}, 0x0) 18:37:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r4, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="2008b603cd8fa380614d6c8bc8ba02b2a9b4d97628b07b6ba382ac238949961fdf264a74a832d7a78cf231957563b539f34d839f707ffe58e7ce26b62eb22c2630ddbf0592f56167f50405000000a9061ea386a49f97", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="000001086c4e703c0ee49306cd72cd379ae7f3696da225cb8b629753fad99a6bf3ebd16bddcfc3d91c7ac6670d74c61c4250d1402cf4f402122893f34c182eac451ad39a1af12ce4da24a0da562407968e5da7ec5f7ff146f4f510c7c1bfd6cd1e52c487addf796eddf6ea7758f4d600bc09cb257c4a3626d692f71de024b0833ec36a4f29c54d9624a1bc71abe3c7e59b5655000d0af3b29939a3535382b400f82b34e860926122e0c895d4055f4d259577762d3b470e2baac52abcfbe4e02cae6e5be128f499501426362bc55b54ca90a406aeaac9d96ada518e1ab0d6730b599f05aa8b9dfe0000000000000000"], 0x9) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5, 0x2, 0x3ff, 0x4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e22, 0x1, @empty, 0x2}}}, &(0x7f0000000480)=0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r8, &(0x7f0000057fa0)=[{}], 0x10) flistxattr(r8, &(0x7f0000000200)=""/200, 0xc8) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x3) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5be, 0x200000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@empty, 0x55, r5}) r6 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1000, 0x101000) ioctl$TIOCEXCL(r6, 0x540c) [ 380.625128][T12350] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 380.638548][T13097] bond1 (unregistering): Released all slaves [ 380.702806][T12349] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 380.760389][T13100] bond1 (unregistering): Released all slaves [ 380.774611][T12479] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 380.872894][T12350] usb 5-1: Using ep0 maxpacket: 8 [ 380.993096][T12350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.004367][T12350] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.017361][T12350] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 381.026701][T12350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.032727][T12479] usb 6-1: Using ep0 maxpacket: 16 [ 381.041405][T12350] usb 5-1: config 0 descriptor?? [ 381.073008][T12349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.083744][T12349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 381.093992][T12349] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bd.14 [ 381.103401][T12349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.118765][T12349] usb 4-1: config 0 descriptor?? [ 381.165114][T12479] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 381.168926][T12349] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 381.173580][T12479] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 381.192467][T12479] usb 6-1: config 0 has no interface number 1 [ 381.199172][T12479] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 381.210979][T12479] usb 6-1: too many endpoints for config 0 interface 173 altsetting 3: 239, using maximum allowed: 30 [ 381.222175][T12479] usb 6-1: config 0 interface 173 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 381.235748][T12479] usb 6-1: config 0 interface 173 has no altsetting 0 [ 381.242739][T12479] usb 6-1: New USB device found, idVendor=2013, idProduct=0257, bcdDevice=a2.a0 [ 381.251896][T12479] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.264811][T12479] usb 6-1: config 0 descriptor?? [ 381.307251][T12479] smsusb:smsusb_probe: board id=21, interface number 0 [ 381.370630][T12349] usb 4-1: USB disconnect, device number 4 [ 381.553070][T12479] usb 6-1: string descriptor 0 read error: -71 [ 381.559629][T12350] holtek 0003:1241:5015.0001: item fetching failed at offset 778941769 [ 381.563339][T12479] smsusb:smsusb_probe: board id=21, interface number 173 [ 381.568661][T12350] holtek 0003:1241:5015.0001: parse failed [ 381.581207][T12350] holtek: probe of 0003:1241:5015.0001 failed with error -22 [ 381.581708][T12479] usb 6-1: USB disconnect, device number 2 18:37:46 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000140)='/\x00\x01\x00\x00\x80\x00\x00\x00aw#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x40046629, 0x0) 18:37:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) syncfs(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r0) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r4, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4, 0x810, r4, 0x10000000) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', '/dev/input/event#\x00'}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x408000) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x19, 0x2c, 0x0, 0xffffffffffffffef) 18:37:46 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x7fb) 18:37:46 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2d, 0x2e, 0x70, 0x40, 0x1397, 0xbd, 0xa8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0xee, 0xc7}}]}}]}}, 0x0) [ 381.788258][T12349] usb 5-1: USB disconnect, device number 3 18:37:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x4, @rand_addr="fb9bdb27aac21083480d8cdedc6c3a60", 0xfffffff7}, @in6={0xa, 0x4e22, 0x24eb, @rand_addr="88e6025a86b6afe9b5bef7d116809375", 0x6}], 0x48) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x0, 0x1, 'l'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="b71600962499e7ae4832a075947aab925900000000000000"], 0x1e) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 382.062870][ T3935] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 382.152980][T12350] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 382.292923][T12479] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 382.442918][ T3935] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.8f [ 382.452912][ T3935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.472296][ T3935] usb 3-1: config 0 descriptor?? [ 382.520229][ T3935] usb 3-1: invalid MIDI EP [ 382.523144][T12350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.525438][ T3935] usb 3-1: snd-bcd2000: error during probing [ 382.535640][T12350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 382.542220][ T3935] snd-bcd2000: probe of 3-1:0.0 failed with error -22 [ 382.551842][T12350] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bd.14 [ 382.561000][T12479] usb 6-1: Using ep0 maxpacket: 16 [ 382.567965][T12350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.581727][T12350] usb 4-1: config 0 descriptor?? [ 382.629451][T12350] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 382.643343][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 382.716210][T12479] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 382.724678][T12479] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 382.734224][T12479] usb 6-1: config 0 has no interface number 1 [ 382.740449][T12479] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 382.751079][T12479] usb 6-1: too many endpoints for config 0 interface 173 altsetting 3: 239, using maximum allowed: 30 [ 382.762590][T12479] usb 6-1: config 0 interface 173 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 382.776213][T12479] usb 6-1: config 0 interface 173 has no altsetting 0 [ 382.783269][T12479] usb 6-1: New USB device found, idVendor=2013, idProduct=0257, bcdDevice=a2.a0 [ 382.783349][T12479] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.802456][T12350] usb 3-1: USB disconnect, device number 5 [ 382.812391][T12479] usb 6-1: config 0 descriptor?? [ 382.825125][T12349] usb 4-1: USB disconnect, device number 5 [ 382.857395][T12479] smsusb:smsusb_probe: board id=21, interface number 0 [ 382.933058][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 383.063651][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.075061][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.088090][ T17] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 383.097314][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.108559][T12479] usb 6-1: string descriptor 0 read error: -71 [ 383.119167][T12479] smsusb:smsusb_probe: board id=21, interface number 173 [ 383.163122][T12479] usb 6-1: USB disconnect, device number 3 [ 383.201418][ T17] usb 5-1: config 0 descriptor?? 18:37:48 executing program 4: r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 18:37:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) close(r0) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r4, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r5, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00Q\x00\x00\x00\x00'], 0x9) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r7, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x20, 0x20, 0x2, 0xfffc, 0x9, 0x0, 0x70, {r8, @in6={{0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, [], 0xf}, 0x80}}, 0x80, 0x10000, 0x8, 0x5, 0x8}}, &(0x7f00000000c0)=0xb0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) fcntl$notify(r9, 0x402, 0x10) 18:37:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) r2 = socket$inet6(0xa, 0x6, 0x81) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x6) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffd, 0x711003) write$evdev(r4, &(0x7f0000057fa0)=[{}], 0x10) r5 = dup2(r4, 0xffffffffffffffff) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) bind$inet6(r5, 0x0, 0x92) fcntl$setflags(r1, 0x2, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x81) r6 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r6, 0x0, 0x0) fcntl$setflags(r6, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000080)=0x5, 0x8) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x81) 18:37:48 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x51, 0xf0, 0x94, 0x10, 0x2013, 0x257, 0xa2a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe5, 0x85, 0x8d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "ad03efdbb2daff"}]}}]}}]}}]}}, 0x0) 18:37:48 executing program 3: syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0x18, 0x3f, 0x8, 0x84e, 0x1001, 0xbd14, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x73, 0x71, 0x49, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) [ 383.403521][ T17] usbhid 5-1:0.0: can't add hid device: -71 [ 383.409784][ T17] usbhid: probe of 5-1:0.0 failed with error -71 [ 383.475516][ T17] usb 5-1: USB disconnect, device number 4 18:37:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='\x02\x10\t\x00', 0x101003, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) [ 383.622863][T12479] usb 3-1: new high-speed USB device number 6 using dummy_hcd 18:37:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r5, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xf51c, 0x2b1, 0xd85, 0xcb9, 0xd, 0x1, 0xfd, 0x4, 0x3, 0x8, 0x5}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000080)=0x9) [ 383.803242][T12561] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 383.804189][ C0] hrtimer: interrupt took 36157 ns [ 383.811286][ T3935] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 383.902881][ T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 384.245610][T12479] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.8f [ 384.254956][T12479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.276571][T12479] usb 3-1: config 0 descriptor?? [ 384.384505][ T3935] usb 6-1: Using ep0 maxpacket: 16 [ 384.396039][T12479] usb 3-1: invalid MIDI EP [ 384.400642][T12479] usb 3-1: snd-bcd2000: error during probing [ 384.407578][T12479] snd-bcd2000: probe of 3-1:0.0 failed with error -22 [ 384.483082][T12561] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.494264][T12561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 384.504455][T12561] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bd.14 [ 384.513717][T12561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.522974][ T17] usb 5-1: Using ep0 maxpacket: 16 18:37:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='-dFv/`v0;\xc5', 0x511823, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x202080, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x10000, 0x5000, 0x4, 0x6000], 0xfffffffffffffffc, 0x82, 0xffffffffffffffdc}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @multicast2}, {0x0, @dev={[], 0x18}}, 0x40, {0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'rose0\x00'}) sendmsg$inet(r1, &(0x7f0000001400)={&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000240)="0c4d46038c", 0x5}, {&(0x7f0000000280)="cb7c46d7b2a4779b17cc229e534a4be0c4f67077fe93c3858da216e46b60", 0x1e}, {&(0x7f00000002c0)="396c1417b92c78844a58c7ace0ead9ba99283b024f33983ee432df7081a37192d46f2b34309be2eb9415d6aa1fdbf3bf89dc2e995c08d5983e050e925d00227a62f8b4e7a248ee28d4ae20a6ae8af152198f80a288cf3dc39611526e1e84324f0e1f339b0886322e6dd21d20b08fa6ff033a41ed73bbda68f48a96a7ad4db35af977c0c7266bf207cd8d032b088979c085b5dcd01c526da77a2ef0eed4c924968fa15b60f8da3a9610c85b35a547d90e1f7f586cd76182955e724c3bf1df14c13c65858af29994bea06d0744589512e62408b7f60016acb2c8b9a3ef6988c024592b817339ff487cd2b0cc65be54bfca89fb6ef899e48ce1f8c27f1ada50b514c5962edb9960ed5702ee4c9539254931ed9d5186c12997bddc99da1613c4e95882550ae6a5d8cc6fd278a3d60ab57e96ab8b37ff5ed8975cd7984d602f1a4c638d8a988dc9061caffb2b80794c9eaf0a90c8710626d384338a14808c6843af1c5a307d36bb498a9e71c164ccc4afebd9f1797c273b73b37da3a65f822d38d23ea4af6498206a73168ccd45c68575137dbca040ec6cd29cf972f71125b9e23c87e1d2d821ea2bf5742f951b58e41a81f1484d8a016939494745882e6da4e183cf528a4bef07522c8f9ca7042a4ee5074432f3d4ffaa2bb87600969eaa2fa88819ee24c29478ad0c18ad53b60af50f8aa8565353f2a205f9ecd2f610d46d625154eae61ab113a6a463460d1fbe40f6a06d6b0df53d44e3d8c63b417edd4e7cc7027ad4767a3ba5cee9853c280343acc10b0b75880770aae519b6d604de3a2980fadd833ddb76f9f0637f75ec98ab10de42d405892b504f93bfc5e096e10dc85be876a5df2a339e58ce8b52c0617641fd48459632cd6954876ed05131e56f3641c0491caeacc31d5f47927a507e5d21f75b1ad248c1a1f603b11c9b60a2c6a8ef75767087e3345afb71a8939ec0afaa355616627560f028ee8c86820339dc166990117be892879c68b61a63a8dffc4ae187099378bfaae2ba211a324fb278013f01bbf3bbfb6b9d33850404c2a633a9680ecfcbf4dee7e55587469e428bd31aa51a4ab1b44bcddc9b0ab42e2bb61b477171d44253f113953c02d69348109d55b7dcd3f098e8d7d8a278334385d6726163ec0b32cb7790e85797a3282b928c04d01a368de9c207b927b7ca823bc332faf30af64b7bd6bf02dbe926fe90c6e96024a4d903e0228c3ea796ad1176cf0756fa4886c72ca054ca5c34676669d425609a7f9d507cd7a536c45ae774273c9beecced4b801b0c855a7a36e0e0da8099a98585e5b35f12c8bea5ffdd9c15ad4175b2803de777adb6b88e8585291f07035fc68f86949930a97bc6604dea4ec8e8c7ef5a098da324063a190c5d7ae5d517ce8985366e2c982a1ef947ef60f8d5278b7ffba1fcdf27ce0897a57d152a7b8970304ae1a7ecdf0add5a841c62f626a5540bee67d4b31e851624e192e39bcf979f16c3fc20315a434025d8aadabe97f6a599ead0a8f042148f4ea20ed2edb57efb7a5210cec743249d0005ea593220a117ac276e897f8cc800a5faaeda57a926844fddf010fc8f7d636622f646bcd1bd89ce8fb2ce4024066404e3d72cefc54ccf59741dfc42674623b3e171906aac80e66ba5f52657ed818a507a30ec5262651be8a970895c920676bef9abcd78869077ec598a6fdeb0625c7e6be0737e22759c5e29251d12aa4c0f8619d7468a964800a70b25b861028431ea96b17fd0bdfe2a883876b83967416582ac86aef942f70f2aa4587f2fcd8e2dd015e24f03be7d1601f66c29df1481c9793f381bd5d925bec647ac5607dd07f869e0071f9bd23d0ee51c6a4f663abaedcd3f443ac2981a7926205674e0dc3dfe61400af98c369936a655de8ba45cdf471553a6d178215fe709491d04acae29792447a32de4053b4731f6d922d54c68640a5a28d99073f098f5232043021025b9663cb53f575a267566a2804ab618fca8dd38265d036126b0bb65a7e874d34f9eba57099c22f6b05101a232dee95fa6a8421afd6caf845d5926dff4ec601c94e25fe4f73c9461e7b41bc55c6b926aee09f22c7d564385796fe5e4f152be6675a844ee80401aaff6e280455ca28f0739488bd10ad9bb6cabcb17d3b992c4bfc2bc9c638c602f92ec7c950f57b892f88c342cadb1f8fc443430973fdee3d796cd0f4ffe685822d939ec4e4ddb4586b159cd58b6cb55e8849a2d68efa90d736d75d3f92bb92a10da67a3ff5d8e820d0afa364551a003ceb4c219324851beb3726477ec9269d04c01918f32eaf10ae3b78c83fe40a99a548a5a463598ca8c405a638d459c3dc4a92812075bf144529e45504a91101774d64dffc05f374b708dcaa74b4beb0b1313825da102cb336e2c997050a4a5b03cbdc40d5c78702cb26ab15f4ca3f0f55416d608ac3617eff17cdd7ffb05562bb40d51ebb644ce939d9098cff3ecca586d1c9054d3e402e134ba048a288ab57eeaec9a966188756cb48f11928ac3bcbd5c3c20879474885c1524cb3580b5483005e7bf09d8d51f7f3668f4540aa00d20301b72e09259bd5cf08e24a554292644f3ee6bd9e1f873063d480be244640a359c12e6ae2265dfa7e375b5d2f87f7fd9b26c08ea914857ddbe509c37ca4b28a0a3c24ccbc40f9e7231d2343cdeb625ad3eaa71c058d7de41f8e7eaaff5630560456c91983f639fe831c7fa4731cc8ad7005dc3a13928b265242edc44b18b9c0aa4aa6f83a6153ec2efcd6d11bd9ef2bd8335726966ea20d0e01d5512949848d29541f80b3e52519201fed31569a6ccca86c7076efed0575af101a197e638bb95820e33c65158c4184ab58c40ac2c12275bce424010388ceb560709a3447f9351a1e19ceb9804bb54551336bad4a4c0296de19979ae736975bc31b9ae9565ad84c466ce74259d328b11a156fd47361e6364b594e2c5774b0f1a5703cde942a9665fa2e54e5a265415964482546e156ee3f108beb2c6f51f726ca337726f5b0ce0084459847fa19f0f6fb6dcd16478fd209de7f67c6203ed814ac7a0448bdc1f7ecf18e45e0ea6b224c7aa40b808ac2f5a48c906be012e0dad5c9e3dce415c85b4e8dac567a097b634732e291389022b9fd8586d88b5ef67fc766231e4fe4f08c20985c6029c51db2ab397a9d811d541e2271f9b3f41d71dddd35c62605b06e39073aeda0ecaef14a9f93752ec29f74f2f6bcf0df32688a335a5145dd88b9837263ade2be343db6cfa17ef775a47ea30d00f65eef96308306dbf0772825dc59a153f44ea45b0c5635bf19ab1b4b3eb906191165184b9f331d01ba9704aea118e8b7ff40a67c7c8597fc91fe12b579ec19453f93947d7cf9308a5a7d70c172bd3cb20129053264f52349738d8b827b78c11c7c84e315a9f20d677640be67171992e3b10c889d62060dd0f6e6df46eb221136d3bf1c55681acf06dd38c841c13e1cb6d2f782824e0d5f1231270354ec0363821f0c456aff87475850f66f45fb1a3cf6125233298546198cfaa9f0f9b24fd466d7b461fd97b92d4119e479f3c1635874eb8b8daa3e1bf4ea4cea4932de5dde4ee365013367c5539d7d67b0377c501f4dadb53b309644b930212251a777d55bb5bac4892ce63ab4c186c010cf28fbdc61107712d4bb59a326c921ddc28298f20dc46b3e8150720555d933198ed6e80126fc5dca3dd7e0c7b85a8ea1d76fc39ea5ac2351aa053b3af86d3c226abebf06275f0e5d14b9224e91bdb62abb1d75541adb98c3ec790c50e6650e66d1ed53b5178963d74cf8c2a3277ce61521d90d5fde3d0f28e00212f7a34123b5737181880b552894cecaa974235f027fb9a8bf7d3d32ce13f1e445342945a84e0915ba13f7c7a7443f84f07e42b61e0ca6c5cd140b758a1863585d6ab606fef2aecbaa2cc5e52d954c58b9f5a7e5256504b6b717e515577b909b18f1bece29ce5efb29ac6beb39df1aaedb0c86801e90406a365da4c486408a37060c1f534f624697f405e4122aee4e4aa8d5fe3c14513e13471e4e6ad47b20569926e8ecef378e20cba02cfb7557dd82ab01a8caf805a8f3c9eebe27db9032c81b3b18fe38076b5ae2373c986a678f60c4eca9efe2e0910dcbbffc864e948d97b00e3f08e5dc0704cec958698fe3c032aecb7a918059959af36cd67ca1bf768005c45dbe8194c64ac1c54f1ee38ba5659a0f999163e93f5f8ac6c7aef99601b7fb33ce90cfc3e276e5617e56380088f7079ea7a6d13ac971e6c6907caabcee219257f483748523b058b0d517fe177a69562e61ace635ddc0ece0f08501730d6717b0d2d0bd772632d37dfaec97e9c99dea2b22e5d17eba625ebbbb683094de91f6235d8cef548b6a973c7ff707afc5d0409306c9544914866c6aeda8741885f777f9ffd2b60812917bbc09d9e88eb94c4b7373c3261205ec0f0a83820ca8cf92e6488f008b3f720913078c73531c3677814b6c3b5fdf8f40b697e20111874dca25966379f0a2099cda3cc073a9235fd74ae6d750d6a85e9ff6cc9dc39801444237f494adab0f208d9c2a693446ef875747be2eec60590499d9776172709d80e0a0826cd5c3cea7ee65b225c5fc0e5f34068cf174cb7ae157cb004d071a14799547fdf3b60db3181d36fe5ff453f7a5b0d4b9d4eaa8a66e210036edd430ee298d61097f956259a75f58f8362919c03db6db4b0fd540772fd5a000a0c90099ce0ed20360db23da946476467362bc7029df1038e97b89862a588ea2a1fa1f6b08133b06a9f5cbf314ceb332500b3db0713ffd1fef1547baced9b960c161457919c23e0a419d91751d3f886af5bd6117579a9f7cc8ad90db99b866b7dc02b3ed434c8390aebbada67783569aaa0cff5fd1e6a023d287cb3ec550bb1897a4eec979e90e23c3c69864c92a4013c8031b6593ff53d0cf9ca353f2fa6c5a4244d489a7a29250bc56f3cba3e6c1160fcbda000e55cd5a625fb664cc739e5238745a89a61f423595d740c28fa0211369ccfaea571850c28f740fa34e0b8a1d7b01b3ca77bb853278567f6ee12fe65f55d15fe653b39d0aaad38e91b9322620973fcf2b8838eaa9ebcfa922ee15471e56e8c99990d59d79ba4205ed5c7b3b06c32e2faa91bc2704bc6e00ad46830953baa01189d45e419ca3803b99c3f1afb3b7618e4b2798f0cff0ac9c6ded9247b44d694b0f1703ed50f0131c4be77beb43d326524fb94dcdfcf9b8022c3630e4d6bed3b279bd93df8a69f304b22cd3ee34432e25754749e09006889fedc0410cc4e27023a805c55c81f6f9d8ae40c824d3a5c4bbdaf87a37e2e14acc256d0601f8cda5511b0128fe0e9c1c36731c6a8ea327115317ca33ec30c46301cff1a6a06ec5d197aa60e0f619967c7faf62767cbed701de3f2c9f1cf5703a733020da35f341c1e14b11bf79b41ed8af73f8ca9757c1c67ed0c6f44609d06ea226701ee45be6834e1e5f8ec5dc1ea74a8a8ab915842570fd332ee8c3812fb7f52e0a83798b0b2715d56b7675fbff55046ede56b9f727fb8e3b174567b12205d9e2f92ce9e5dcd121cbf1f2d400954113bc439d92f87d5e03191de9075e2c13fda0a05dc26ea69f968c1ec976b778733e2c84b4e386d0ce4eba9cf89a798025f61980d0164e4f80dea6b53459cfb54e335ec789a1de2637e93d6a43df9e2f887ef5ddd9332a9116ec037597e70080721665edc3cdde0b8192a45784c9acba49b2adf6630538b02671250e6a57bec89f91c720bcbf3803b4ab11836f14c9d02ed148c9a29a34c1f267623e806fd", 0x1000}], 0x3, &(0x7f0000001300)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@end, @noop, @generic={0x1, 0x8, "0360b12a4536"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2e}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x0, 0x12, "f5b43398490e48cbee19d80e0a8ee526"}, @generic={0x7, 0xf, "7e1d1eea4400294a09783152f4"}, @ssrr={0x89, 0x7, 0x80, [@rand_addr=0xd23]}, @end]}}}], 0xf0}, 0x8804) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)) [ 384.533366][T12479] usb 3-1: USB disconnect, device number 6 [ 384.547527][T12561] usb 4-1: config 0 descriptor?? [ 384.563192][ T3935] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 384.571628][ T3935] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 384.581422][ T3935] usb 6-1: config 0 has no interface number 1 [ 384.587760][ T3935] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 384.598754][ T3935] usb 6-1: too many endpoints for config 0 interface 173 altsetting 3: 239, using maximum allowed: 30 [ 384.609894][ T3935] usb 6-1: config 0 interface 173 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 384.623300][ T3935] usb 6-1: config 0 interface 173 has no altsetting 0 [ 384.630223][ T3935] usb 6-1: New USB device found, idVendor=2013, idProduct=0257, bcdDevice=a2.a0 [ 384.639451][ T3935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.681851][T12561] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 384.735058][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 384.743589][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 384.754712][ T17] usb 5-1: config 0 has no interface number 0 [ 384.760950][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 384.772485][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 18:37:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000340)={0x69, &(0x7f00000002c0)=""/105}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000200)={r6, 0x0, 0x1, 'l'}, 0x9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r7, 0xaeb2}, 0xc) close(r0) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f0000000100)='ns/mnt\x00') semget$private(0x0, 0xc, 0x20) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000000)={0xbb2a}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r0, 0x9, &(0x7f0000000040)="086643130fbef586bccdb41bf8bb7e") syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) connect(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x80) 18:37:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215430065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:37:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/\x92\x84mx\x00', 0x32e480, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 384.886388][T12479] usb 4-1: USB disconnect, device number 6 [ 384.911539][ T3935] usb 6-1: config 0 descriptor?? [ 384.947893][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 384.956896][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 384.967435][ T17] usb 5-1: config 0 has no interface number 0 [ 384.973769][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 384.985309][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 385.019491][ T3935] smsusb:smsusb_probe: board id=21, interface number 0 [ 385.144652][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 385.153242][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 385.153319][ T17] usb 5-1: config 0 has no interface number 0 [ 385.169889][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 385.169992][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 18:37:50 executing program 0: r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = socket$unix(0x1, 0x400000000001, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r4, &(0x7f0000000740), 0xfffffdd5) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r7, &(0x7f0000000140)='./file0\x00', r9, r10, 0x100) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r12, &(0x7f0000000140)='./file0\x00', r14, r15, 0x100) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="950000007d01000000710085ce051b00000100000000030000000000000008e0492b000000000002000020000000000000000f002f6465762f73657175656e636572001d0021706f7369785f61636cf7616363657373776c616e30656d317070703005002c5d250f002f6465762f7365717508000000000000002f6465762f73657175656e63657200b63142e4ae53b804b733784b0c83925e8b214a52a73c9de4daa91efd1a438461d3f176d4197a84e8bdb3a60cc1331b55465b4ec4da8164d08ebff3d549649ca45ee6808383d37d9d3dbd8687ffe9347a7bcc78bd55ca68d18c9d48714842811f5488105edc", @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r14], 0x95) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r17 = gettid() syz_open_procfs$namespace(r17, &(0x7f0000000100)='ns/mnt\x00') r18 = getpgrp(r17) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x40, r2, r3, r14, r16, 0xfda6d5ae07df5605, 0x6}, 0x2317, 0x4, 0xcb, 0x3, r18, r19, 0xc3}) r20 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x2, 0xa52, 0x200}) ioctl$TIOCSCTTY(r20, 0x540e, 0x0) [ 385.233758][ T3935] usb 6-1: string descriptor 0 read error: -71 [ 385.244397][ T3935] smsusb:smsusb_probe: board id=21, interface number 173 [ 385.291345][ T3935] usb 6-1: USB disconnect, device number 4 [ 385.343858][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 385.352159][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 385.362884][ T17] usb 5-1: config 0 has no interface number 0 [ 385.369432][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 385.381622][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 385.473240][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 385.482105][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 385.493092][ T17] usb 5-1: config 0 has no interface number 0 [ 385.499380][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 385.510911][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 385.522498][ T17] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 385.523027][T12349] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 385.531778][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.550842][ T17] usb 5-1: config 0 descriptor?? [ 385.601792][ T17] yurex 5-1:0.101: USB YUREX device now attached to Yurex #0 [ 385.798753][ T17] usb 5-1: USB disconnect, device number 5 [ 385.811568][ T17] yurex 5-1:0.101: USB YUREX #0 now disconnected [ 385.913080][T12349] usb 3-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=d2.65 [ 385.922423][T12349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.932142][T12349] usb 3-1: config 0 descriptor?? [ 385.978453][T12349] input: iMON Panel, Knob and Mouse(15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 386.212940][T12349] Registered IR keymap rc-imon-pad [ 386.423857][T12349] rc rc0: iMON Remote (15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 386.435067][T12349] input: iMON Remote (15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 386.449609][T12349] imon 3-1:0.0: iMON device (15c2:0043, intf0) on usb<3:7> initialized [ 386.572922][ T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 386.606090][ T3935] usb 3-1: USB disconnect, device number 7 [ 386.612954][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 386.812973][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 386.933077][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 386.941447][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 386.951888][ T17] usb 5-1: config 0 has no interface number 0 [ 386.958254][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 386.969813][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 387.053170][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 387.061789][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 387.072310][ T17] usb 5-1: config 0 has no interface number 0 [ 387.078578][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 387.090062][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 387.173028][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 387.181406][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 387.191895][ T17] usb 5-1: config 0 has no interface number 0 [ 387.198161][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 387.209754][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 18:37:52 executing program 0: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x2) 18:37:52 executing program 3: syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0x18, 0x3f, 0x8, 0x84e, 0x1001, 0xbd14, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x73, 0x71, 0x49, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) 18:37:52 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x51, 0xf0, 0x94, 0x10, 0x2013, 0x257, 0xa2a0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe5, 0x85, 0x8d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "ad03efdbb2daff"}]}}]}}]}}]}}, 0x0) 18:37:52 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x391}}}}}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18:37:52 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x480000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}], 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes128, 0x460adf93cb7192be, "9bf6373364c0f46c"}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/18) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xb46, 0x80000) r6 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r6, 0x0, 0x0) fcntl$setflags(r6, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000004000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) [ 387.293231][ T17] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 387.301589][ T17] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 387.312031][ T17] usb 5-1: config 0 has no interface number 0 [ 387.318324][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 387.329820][ T17] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 387.395929][ T17] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 387.404074][ T17] usb 5-1: can't read configurations, error -71 [ 387.413216][ T3935] usb 3-1: new high-speed USB device number 8 using dummy_hcd 18:37:52 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x5, 0x40, 0x7, 0x2, 0x5, 0x7, 0xd7, 0x1, 0x4, 0x49, 0x40, 0x81}, {0x8, 0x6, 0xc0, 0x1, 0x6, 0xb7, 0x9, 0xfa, 0x2, 0x40, 0x4, 0x3f, 0x5}, {0x1f, 0x5, 0xfe, 0x2d, 0x6, 0x2, 0x80, 0x1, 0x1, 0x0, 0x1, 0x2, 0x5}], 0x3}) fcntl$setflags(r0, 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r4, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x24, 0x1, @tid=r5}) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x80000001) 18:37:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/\x01\x00\x00\x00x\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x9, 0x8, 0x7, 0x2]}) [ 387.656503][T12479] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 387.696349][T12349] usb 6-1: new high-speed USB device number 5 using dummy_hcd 18:37:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000200)={r5, 0x0, 0x1, 'l'}, 0x9) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) 18:37:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x18000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000001c0)={0xa, 0x1}) r2 = msgget(0x3, 0x41) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x200000) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000040)=0x5) r4 = socket$inet6(0xa, 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000280)="b7fb8905d2af5808c8a83c11150f1d04c30dc492c7d10e37f4ba7b19e7f4e1329d53bbadf8bdc3dfd710a50b481a7f2fe6a09b90940e297ea9703543fe79ba37860291839225b68352dc7ac4eb050bb54e4bfea06fb6293fabb5a167", 0x5c}, {&(0x7f0000000300)="28038a6fc4c6f2ea54d1facf8b56df37672ebaa32da459", 0x17}, {&(0x7f0000000340)="3231f23b6f5a8a25aa990c62e73c32e587698f0e6974534be2a87a3d524c2a1e6052ed3b19c83b8033a6ae67813f10a121e5efa8070550a7199a2607882e8044282a70db4c9ed21821655adfe0554f82cfb520b6230eed91e0a22a8ffac2434f93cac40bed39ae8db1a49e4bd53ccaf91cfbcf034e011f87468e7a6ecfa586b76ef219c6d8a3a24cd319979b63a9fc320a25755942e5c81702870ed40b8234628b0171aa243a67b45243f862ac46956eb462a5fe9cdcccf7b8cd4519e2e6b74213eb9f5c82083812101e1ac1ec3e231a2712d38d51ad3a0409722d79294fa63c52b06ade75b83c0b9ac56b122ef8398e27965519cd9403", 0xf7}, {&(0x7f0000000440)="e50f042d1fef273ae9b2ea2b74a3321eca91f3a1bdc3866d355791fa07de3c211c8a65562f4f2428acbad53f675e442aab2417816fbffcb7c9aed112068daecdf50fc092a1510c34238e54f8a0e74da8f955f4bf95f214725ee06c63ea7ccb9ec943a02c88e2288140ac426a3c45651d8f8558daf179f1f081b38c6447e2b501afc7f659d5f6f0251dc8e24d203126294b5868deaa86e302bdaf3d3b39a17c8eb349303d03dc3baa1b86a1c0cb9ecdf294db8e25946f9f7f057783b3", 0xbc}, {&(0x7f0000000500)="c202f2b66f03bbe2efbdc86e50c0bffe264b6f85ca81c0504b5927bff6f4fc1f68a574d5a57c2f07da2807d9ae65358d0f44ddd131184f7963c579fc7a7c4ad02d8c3c2066ecf30a417e49fa00325714b9b4a2d2e4043094328204321a11143fc2b2d8bb714a2ef9ca6cae12c8810a6fc0b44240e8a90bc9e913b2c68a8db25de49a624d562c24606358d6c6fa1590fc7293e8fa15649c20988a03c5bb265a8b7b4c53d6dcb7c82407aecd3bf7899416d700b17fd3110f4bb78faa2096b61eed", 0xc0}, {&(0x7f00000005c0)="d183f951ccde2b9a7bc7e57a896368300606fbf6dbdfce25cd32f53acb4c31d486e923d3b153de0a4e10545a06d66e949f80bfd2925b613e948e51ac41f8828f9ed275273a648bf3b1314185c95f0dd72e816820b6b2f20bca8ed7064e79941a140b81efb3691131ca6242c716b703081ed2d886557c336aeda2c667bc9be4505f0594a351ea0eeab4632ecf8dc88f3883b6d4a156b03f1a26c7f7eb245ad296898927181b338e040c6b2d223359849e17df8c7240cc57bd5c4ccc8b7c9d39dd92e725fbbc34c7896a03962778c9f6c95a87e454bbb67d266aca53224de2829715", 0xe1}], 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x6) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000200)={r6, 0x0, 0x1, 'l'}, 0x9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000740)={r6, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000800)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000840)={r7, 0x40, 0x3, [0x1, 0xd, 0x2]}, &(0x7f0000000880)=0xe) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/171) [ 387.773164][ T3935] usb 3-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=d2.65 [ 387.782391][ T3935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.822830][ T17] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 387.831397][ T3935] usb 3-1: config 0 descriptor?? [ 387.878797][ T3935] input: iMON Panel, Knob and Mouse(15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 387.942870][T12349] usb 6-1: Using ep0 maxpacket: 16 [ 388.063493][T12349] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 388.071767][T12349] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 388.081345][T12349] usb 6-1: config 0 has no interface number 1 [ 388.083091][T12479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.087814][T12349] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 388.098219][T12479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 388.109553][T12349] usb 6-1: too many endpoints for config 0 interface 173 altsetting 3: 239, using maximum allowed: 30 [ 388.120027][T12479] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bd.14 [ 388.131926][T12349] usb 6-1: config 0 interface 173 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 388.140928][T12479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.155089][T12349] usb 6-1: config 0 interface 173 has no altsetting 0 [ 388.170119][T12349] usb 6-1: New USB device found, idVendor=2013, idProduct=0257, bcdDevice=a2.a0 [ 388.180023][T12349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.192170][T12349] usb 6-1: config 0 descriptor?? 18:37:53 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215430065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 388.227789][T12479] usb 4-1: config 0 descriptor?? [ 388.243706][ T3935] imon:send_packet: packet tx failed (-71) [ 388.247539][T12349] smsusb:smsusb_probe: board id=21, interface number 0 [ 388.263936][ T3935] imon 3-1:0.0: panel buttons/knobs setup failed [ 388.270495][ T3935] Registered IR keymap rc-imon-pad [ 388.283339][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.294689][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 913, setting to 8 [ 388.305975][ T17] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 388.316137][ T17] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 388.333497][T12479] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 388.365396][ T3935] imon:send_packet: packet tx failed (-71) [ 388.384310][ T3935] imon 3-1:0.0: remote input dev register failed [ 388.391028][ T3935] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 388.483220][T12349] usb 6-1: string descriptor 0 read error: -71 [ 388.494327][T12349] smsusb:smsusb_probe: board id=21, interface number 173 [ 388.514360][T12349] usb 6-1: USB disconnect, device number 5 [ 388.521891][T12479] usb 4-1: USB disconnect, device number 7 [ 388.544052][ T3935] imon 3-1:0.0: unable to initialize intf0, err 0 [ 388.550859][ T3935] imon:imon_probe: failed to initialize context! [ 388.557644][ T3935] imon 3-1:0.0: unable to register, err -19 [ 388.603302][ T17] usb 5-1: string descriptor 0 read error: -22 [ 388.609822][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.619750][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.635062][ T3935] usb 3-1: USB disconnect, device number 8 18:37:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='\fd\nvop9$MU', 0x10400, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 388.953622][ T17] cdc_ncm 5-1:1.0: bind() failure [ 388.965399][ T17] cdc_ncm 5-1:1.1: bind() failure [ 389.003097][ T3935] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 389.037240][ T17] usb 5-1: USB disconnect, device number 7 18:37:54 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0x68, 0x60, 0x8, 0x82d, 0x100, 0xf2a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x98, 0x18, 0x7e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0xac, &(0x7f0000000640)={0x0, 0x0, 0x6, "46ee06b168ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:37:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200002, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 18:37:54 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/../raw#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x401c5820, 0x400020) [ 389.363085][ T3935] usb 3-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=d2.65 [ 389.372399][ T3935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.411049][ T3935] usb 3-1: config 0 descriptor?? [ 389.459096][ T3935] input: iMON Panel, Knob and Mouse(15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 389.463029][T12349] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 389.682963][ T17] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 389.693198][ T3935] Registered IR keymap rc-imon-pad [ 389.712847][T12349] usb 6-1: Using ep0 maxpacket: 8 [ 389.853045][T12349] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 389.863641][T12349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.913812][ T3935] rc rc0: iMON Remote (15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 389.925602][ T3935] input: iMON Remote (15c2:0043) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 389.986503][ T3935] imon 3-1:0.0: iMON device (15c2:0043, intf0) on usb<3:9> initialized [ 390.064290][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.077601][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 913, setting to 8 [ 390.088691][ T17] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 390.098892][ T17] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 390.135763][ T3935] usb 3-1: USB disconnect, device number 9 [ 390.163450][T12349] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 390.172001][T12349] usb 6-1: Handspring Visor / Palm OS: port 177, is for unknown use [ 390.180223][T12349] usb 6-1: Handspring Visor / Palm OS: port 238, is for unknown use [ 390.188452][T12349] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 390.363118][ T17] usb 5-1: string descriptor 0 read error: -22 [ 390.369573][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.378927][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.393227][T12349] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 390.401659][T12349] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 390.412652][T12349] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 390.425221][T12349] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 390.437509][T12349] usb 6-1: USB disconnect, device number 6 [ 390.456523][T12349] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 18:37:55 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xeb, 0x8d, 0xe1, 0x2008, 0x7a69, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9b, 0xe1, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x1, 'p'}, 0x0, 0x0, 0x0, 0x0}) 18:37:55 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/../raw#\x00', 0x0, 0x2246) 18:37:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x84cc0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x2, 0x1}, 0x8}, 0x10) close(r0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x205, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8004584}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="ee012bbd7000ffdbdf25020000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 18:37:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) getgid() r1 = socket$unix(0x1, 0x400000000001, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r1, &(0x7f0000000740), 0xfffffdd5) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000140)='./file0\x00', r7, r8, 0x100) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f0000000140)='./file0\x00', r12, r13, 0x100) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="950000007d01000000710085ce050000000100000000030000000000000008e0492b000000000002000020000000000000000f002f6465762f73657175656e636572001d0021706f7369785f61636cf7616363657373776c616e30656d317070703005002c5d250f002f6465762f7365717508000000000000002f6465762f73657175656e63657200", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r12], 0x95) r14 = socket$unix(0x1, 0x400000000001, 0x0) setsockopt$sock_timeval(r14, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r14, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r14, &(0x7f0000000740), 0xfffffdd5) fstat(r14, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup(r16) getsockopt$IPT_SO_GET_REVISION_TARGET(r17, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r17, &(0x7f0000000140)='./file0\x00', r19, r20, 0x100) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) r22 = dup(r21) getsockopt$IPT_SO_GET_REVISION_TARGET(r22, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r23 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r23, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r22, &(0x7f0000000140)='./file0\x00', r24, r25, 0x100) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="950000007d01000000710085ce050000000100000000030000000000000008e0492b000000000002000020000000000000000f002f6465762f73657175656e636572001d0021706f7369785f61636cf7616363657373776c616e30656d317070703005002c5d250f002f6465762f7365717508000000000000002f6465762f73657175656e63657200", @ANYRES32=r15, @ANYRES32=r20, @ANYRES32=r24], 0x95) r26 = socket$unix(0x1, 0x400000000001, 0x0) setsockopt$sock_timeval(r26, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r26, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r26, &(0x7f0000000740), 0xfffffdd5) fstat(r26, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = dup(r29) getsockopt$IPT_SO_GET_REVISION_TARGET(r30, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r31, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r30, &(0x7f0000000140)='./file0\x00', r32, r33, 0x100) r34 = socket$inet6_tcp(0xa, 0x1, 0x0) r35 = dup(r34) getsockopt$IPT_SO_GET_REVISION_TARGET(r35, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r36 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r36, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r35, &(0x7f0000000140)='./file0\x00', r37, r38, 0x100) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="950000007d01000000710085ce050000000100000000030000000000000008e0492b000000000002000020000000000000000f002f6465762f73657175656e636572001d0021706f7369785f61636cf7616363657373776c616e30656d317070703005002c5d250f002f6465762f7365717508000000000000002f6465762f73657175656e63657200", @ANYRES32=r27, @ANYRES32=r33, @ANYRES32=r37], 0x95) r39 = socket$inet6_tcp(0xa, 0x1, 0x0) r40 = dup(r39) getsockopt$IPT_SO_GET_REVISION_TARGET(r40, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r41 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r41, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r40, &(0x7f0000000140)='./file0\x00', r42, r43, 0x100) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r45 = socket$inet6_tcp(0xa, 0x1, 0x0) r46 = dup(r45) getsockopt$IPT_SO_GET_REVISION_TARGET(r46, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r47 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r47, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r46, &(0x7f0000000140)='./file0\x00', r48, r49, 0x100) getgroups(0x7, &(0x7f0000000200)=[r8, r3, r33, r43, r44, r49, r28]) [ 390.489979][T12349] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 390.500603][T12349] visor 6-1:1.0: device disconnected [ 390.552929][ T17] cdc_ncm 5-1:1.0: bind() failure [ 390.564588][ T17] cdc_ncm 5-1:1.1: bind() failure [ 390.612951][ T17] usb 5-1: USB disconnect, device number 8 18:37:55 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x57, 0xc4, 0xd8, 0x8, 0xccd, 0x80, 0xb632, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdf, 0x66, 0xf4}}]}}]}}, 0x0) 18:37:55 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x74, 0x1a, 0xde, 0x8, 0x586, 0x341f, 0xe797, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8a}}, {{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000005300)={0x2c, &(0x7f0000004a00)={0x0, 0x0, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0}) 18:37:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ne|/pfkey\x00', 0x400000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$unix(0x1, 0x400000000001, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r9, &(0x7f0000000740), 0xfffffdd5) fstat(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r12, &(0x7f0000000140)='./file0\x00', r14, r15, 0x100) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup(r16) getsockopt$IPT_SO_GET_REVISION_TARGET(r17, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r17, &(0x7f0000000140)='./file0\x00', r19, r20, 0x100) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="950000007d01000000710085ce050000000100000000030000000000000008e0492b000000000002000020000000000000000f002f6465762f73657175656e636572001d0021706f7369785f61636cf7616363657373776c616e30656d317070703005002c5d250f002f6465762f7365717508000000000000002f6465762f73657175656e63657200", @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r19], 0x95) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in6=@mcast1, 0x4e22, 0x0, 0x4e24, 0xab, 0x681acfc93ae193d4, 0x20, 0x0, 0x84, r8, r19}, {0x0, 0xa75, 0xa429, 0xff, 0x9, 0x3f, 0x200, 0x4}, {0xff, 0x3, 0x9, 0x9}, 0x7f, 0x6e6bb8, 0x2, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d6, 0x1}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3504, 0x0, 0x2, 0x1, 0x8, 0x9, 0x3}}, 0xe8) [ 391.023209][ T17] usb 5-1: new high-speed USB device number 9 using dummy_hcd 18:37:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@get={0x100, 0x13, 0x100, 0x70bd2d, 0x25dfdbfc, {{'lrw(cast6)\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x8001}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 391.092172][T13316] bond1 (unregistering): Released all slaves [ 391.153268][T12349] usb 6-1: new high-speed USB device number 7 using dummy_hcd 18:37:56 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x3, r2, 0x1c, 0x2, @in={0x2, 0x4e24, @empty}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev\x04\xb1\xf8dx\x80', 0x52e90c28c880d058, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) [ 391.233958][ T3935] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 391.236086][T12350] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 391.269974][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 391.393517][ T17] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 391.403150][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.413073][T12349] usb 6-1: Using ep0 maxpacket: 8 [ 391.436704][ T17] usb 5-1: config 0 descriptor?? [ 391.477477][ T17] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 391.487101][ T3935] usb 3-1: Using ep0 maxpacket: 8 [ 391.493415][T12350] usb 4-1: Using ep0 maxpacket: 8 [ 391.543871][T12349] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 391.553497][T12349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.603172][ T3935] usb 3-1: New USB device found, idVendor=0586, idProduct=341f, bcdDevice=e7.97 [ 391.612413][ T3935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.623084][ T3935] usb 3-1: config 0 descriptor?? [ 391.623328][T12350] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b6.32 [ 391.637489][T12350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.648239][T12350] usb 4-1: config 0 descriptor?? [ 391.833312][T12349] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 391.841731][T12349] visor: probe of 6-1:1.0 failed with error -71 [ 391.851034][T12350] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 391.859099][T12350] snd-usb-6fire: probe of 4-1:0.0 failed with error -110 [ 391.868811][T12349] usb 6-1: USB disconnect, device number 7 [ 391.883193][ T3935] rtl8192cu: Chip version 0x10 [ 391.898307][T12479] usb 4-1: USB disconnect, device number 8 18:37:57 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0x68, 0x60, 0x8, 0x82d, 0x100, 0xf2a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x98, 0x18, 0x7e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0xac, &(0x7f0000000640)={0x0, 0x0, 0x6, "46ee06b168ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:37:57 executing program 1: r0 = semget$private(0x0, 0x4, 0x44) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/96) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r2, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffbf, 0x0, 0x0, 0xfffffcc5) 18:37:57 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r1, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x8000, 0xad, &(0x7f0000000040)="eb75cd4ee95567eb61b6bcad603798594d1601b5c2570f632922a4ce8a090901d0946d79ca739029d42aa399506bb6e96f73aecf77cff565ce658ed3bf55e0a33e333b91cfe0c74c1885c4809e21c3c136638a8f96881b4071d29098d2bf983bfcaf3642bb04f0024cf58e5ce8430c946319cad304dded0e4ca4eb3b3816ed041fc7c1445a1b34e336d6d4f1022344406c8745364defe595d2c000978830aac3b1159668e8f644df80bd585ad9", 0x3, 0x1f, 0x0, 0xd0b7, 0x0, 0x2, 0x2, 'syz1\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x109080, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0xb06a3920d0e0d6bc, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x20800, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000140)=""/79) bind$inet6(r3, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000005c0)) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r4, &(0x7f0000057fa0)=[{}], 0x10) r5 = dup3(r2, r4, 0x80000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x8) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f00000003c0)="1830618a197bad89bab5852e2d32c3f2dc4dddd7b0e222a25587e42e4b9586e8f76e9260487ec8eb36697a0fb551e09f43b923a47be501b44de671611be4eeb322328b99a474bb49cecffe71058a02f84d471a388fe61ee2f9f2b7c3552c51efcabfafd7e47721ed576c63f62002a772ccd828bb7acb4ae114", 0x79) [ 392.532866][T12479] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 392.543450][ T3935] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 392.550986][ T3935] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 392.568894][ T17] ===================================================== [ 392.575891][ T17] BUG: KMSAN: uninit-value in friio_power_ctrl+0xb3e/0x1a70 [ 392.583191][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.4.0-rc3+ #0 [ 392.590741][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.600818][ T17] Workqueue: usb_hub_wq hub_event [ 392.605852][ T17] Call Trace: [ 392.609167][ T17] dump_stack+0x191/0x1f0 [ 392.613534][ T17] kmsan_report+0x14a/0x2f0 [ 392.618069][ T17] __msan_warning+0x73/0xf0 [ 392.622596][ T17] friio_power_ctrl+0xb3e/0x1a70 [ 392.627554][ T17] ? kasan_kmalloc+0xd/0x30 [ 392.632082][ T17] ? gl861_i2c_msg+0x6e0/0x6e0 [ 392.636868][ T17] dvb_usbv2_probe+0xd3d/0x5dd0 [ 392.641751][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 392.647660][ T17] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 392.653639][ T17] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 392.659632][ T17] usb_probe_interface+0xd19/0x1310 [ 392.664875][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 392.670775][ T17] ? usb_register_driver+0x860/0x860 [ 392.676086][ T17] really_probe+0xd91/0x1f90 [ 392.680681][ T17] driver_probe_device+0x1ba/0x510 [ 392.685791][ T17] __device_attach_driver+0x5b8/0x790 [ 392.691279][ T17] bus_for_each_drv+0x28e/0x3b0 [ 392.696142][ T17] ? deferred_probe_work_func+0x400/0x400 [ 392.702011][ T17] __device_attach+0x489/0x750 [ 392.706978][ T17] device_initial_probe+0x4a/0x60 [ 392.712014][ T17] bus_probe_device+0x131/0x390 [ 392.716989][ T17] device_add+0x25b5/0x2df0 [ 392.721509][ T17] usb_set_configuration+0x309f/0x3710 [ 392.727289][ T17] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 392.733407][ T17] generic_probe+0xe7/0x280 [ 392.737961][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 392.744380][ T17] usb_probe_device+0x146/0x200 [ 392.749257][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 392.755164][ T17] ? usb_register_device_driver+0x500/0x500 [ 392.761061][ T17] really_probe+0xd91/0x1f90 [ 392.765671][ T17] driver_probe_device+0x1ba/0x510 [ 392.765701][ T17] __device_attach_driver+0x5b8/0x790 [ 392.765733][ T17] bus_for_each_drv+0x28e/0x3b0 [ 392.765750][ T17] ? deferred_probe_work_func+0x400/0x400 [ 392.765774][ T17] __device_attach+0x489/0x750 [ 392.765813][ T17] device_initial_probe+0x4a/0x60 [ 392.776308][ T17] bus_probe_device+0x131/0x390 [ 392.801447][ T17] device_add+0x25b5/0x2df0 [ 392.805959][ T17] usb_new_device+0x23e5/0x2fb0 [ 392.810838][ T17] hub_event+0x581d/0x72f0 [ 392.815305][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 392.821184][ T17] ? led_work+0x720/0x720 [ 392.825844][ T17] ? led_work+0x720/0x720 [ 392.830191][ T17] process_one_work+0x1572/0x1ef0 [ 392.835246][ T17] worker_thread+0x189c/0x2460 [ 392.840024][ T17] kthread+0x4b5/0x4f0 [ 392.844098][ T17] ? process_one_work+0x1ef0/0x1ef0 [ 392.849298][ T17] ? kthread_blkcg+0xf0/0xf0 [ 392.853875][ T17] ret_from_fork+0x35/0x40 [ 392.858285][ T17] [ 392.860595][ T17] Local variable description: ----rbuf.i@friio_power_ctrl [ 392.868395][ T17] Variable was created at: [ 392.872801][ T17] friio_power_ctrl+0x92/0x1a70 [ 392.877666][ T17] friio_power_ctrl+0x92/0x1a70 [ 392.882499][ T17] ===================================================== [ 392.889416][ T17] Disabling lock debugging due to kernel taint [ 392.895626][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 392.902220][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.4.0-rc3+ #0 [ 392.911005][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.921091][ T17] Workqueue: usb_hub_wq hub_event [ 392.926126][ T17] Call Trace: [ 392.929422][ T17] dump_stack+0x191/0x1f0 [ 392.933747][ T17] panic+0x3c9/0xc1e [ 392.937677][ T17] kmsan_report+0x2e8/0x2f0 [ 392.942184][ T17] __msan_warning+0x73/0xf0 [ 392.946682][ T17] friio_power_ctrl+0xb3e/0x1a70 [ 392.951697][ T17] ? kasan_kmalloc+0xd/0x30 [ 392.956225][ T17] ? gl861_i2c_msg+0x6e0/0x6e0 [ 392.960978][ T17] dvb_usbv2_probe+0xd3d/0x5dd0 [ 392.965842][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 392.971738][ T17] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 392.977749][ T17] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 392.983758][ T17] usb_probe_interface+0xd19/0x1310 [ 392.989135][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 392.995039][ T17] ? usb_register_driver+0x860/0x860 [ 393.000353][ T17] really_probe+0xd91/0x1f90 [ 393.004961][ T17] driver_probe_device+0x1ba/0x510 [ 393.010088][ T17] __device_attach_driver+0x5b8/0x790 [ 393.015508][ T17] bus_for_each_drv+0x28e/0x3b0 [ 393.020365][ T17] ? deferred_probe_work_func+0x400/0x400 [ 393.026091][ T17] __device_attach+0x489/0x750 [ 393.030852][ T17] device_initial_probe+0x4a/0x60 [ 393.035881][ T17] bus_probe_device+0x131/0x390 [ 393.040752][ T17] device_add+0x25b5/0x2df0 [ 393.045301][ T17] usb_set_configuration+0x309f/0x3710 [ 393.050770][ T17] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 393.057357][ T17] generic_probe+0xe7/0x280 [ 393.061877][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 393.067613][ T17] usb_probe_device+0x146/0x200 [ 393.072483][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 393.078376][ T17] ? usb_register_device_driver+0x500/0x500 [ 393.084258][ T17] really_probe+0xd91/0x1f90 [ 393.088840][ T17] driver_probe_device+0x1ba/0x510 [ 393.093961][ T17] __device_attach_driver+0x5b8/0x790 [ 393.099354][ T17] bus_for_each_drv+0x28e/0x3b0 [ 393.104215][ T17] ? deferred_probe_work_func+0x400/0x400 [ 393.109935][ T17] __device_attach+0x489/0x750 [ 393.114693][ T17] device_initial_probe+0x4a/0x60 [ 393.119760][ T17] bus_probe_device+0x131/0x390 [ 393.124614][ T17] device_add+0x25b5/0x2df0 [ 393.129146][ T17] usb_new_device+0x23e5/0x2fb0 [ 393.134041][ T17] hub_event+0x581d/0x72f0 [ 393.138668][ T17] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 393.144584][ T17] ? led_work+0x720/0x720 [ 393.148949][ T17] ? led_work+0x720/0x720 [ 393.153318][ T17] process_one_work+0x1572/0x1ef0 [ 393.158371][ T17] worker_thread+0x189c/0x2460 [ 393.163144][ T17] kthread+0x4b5/0x4f0 [ 393.167219][ T17] ? process_one_work+0x1ef0/0x1ef0 [ 393.172418][ T17] ? kthread_blkcg+0xf0/0xf0 [ 393.177085][ T17] ret_from_fork+0x35/0x40 [ 393.183091][ T17] Kernel Offset: disabled [ 393.187430][ T17] Rebooting in 86400 seconds..