0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 18:09:00 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000001580)=ANY=[]], 0x1, 0x0) msgrcv(r0, &(0x7f0000000040), 0x8, 0x0, 0x0) 18:09:00 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) 18:09:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) 18:09:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)) 18:09:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) 18:09:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 18:09:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r6 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x1c}, 0x0) fchown(r3, r7, r5) fcntl$getown(0xffffffffffffffff, 0x9) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r8, 0x2) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) recvmmsg(r0, 0x0, 0x0, 0x2, &(0x7f0000004e40)) 18:09:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) 18:09:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{0x0}], 0x1}, 0x0) 18:09:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) 18:09:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{0x0}], 0x1}, 0x0) 18:09:01 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 18:09:01 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) dup3(r2, r1, 0x0) 18:09:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) 18:09:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{0x0}], 0x1}, 0x0) 18:09:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gre0\x00'}) 18:09:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)}], 0x1}, 0x0) 18:09:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x5428, 0x0) [ 1529.928739][T19712] validate_nla: 1 callbacks suppressed [ 1529.928763][T19712] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:09:02 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x43, 0x0, 0x0) 18:09:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) [ 1530.061480][T19712] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:09:02 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) dup3(r2, r1, 0x0) 18:09:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sysfs$2(0x2, 0x3, &(0x7f0000000100)=""/83) 18:09:02 executing program 3: 18:09:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)}], 0x1}, 0x0) 18:09:02 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 18:09:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x0) 18:09:02 executing program 1: 18:09:02 executing program 0: 18:09:02 executing program 3: 18:09:02 executing program 0: [ 1530.814079][ C1] net_ratelimit: 18 callbacks suppressed [ 1530.814103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1530.826428][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1530.833155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1530.839820][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:02 executing program 1: 18:09:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)}], 0x1}, 0x0) 18:09:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 18:09:03 executing program 3: 18:09:03 executing program 1: 18:09:03 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 18:09:03 executing program 0: 18:09:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) 18:09:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 18:09:03 executing program 3: 18:09:03 executing program 1: 18:09:03 executing program 0: 18:09:03 executing program 3: 18:09:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 18:09:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) 18:09:03 executing program 1: 18:09:03 executing program 0: [ 1531.773871][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1531.780222][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:03 executing program 5: 18:09:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:03 executing program 1: 18:09:03 executing program 3: 18:09:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) 18:09:03 executing program 0: 18:09:04 executing program 3: 18:09:04 executing program 1: [ 1532.003814][T20093] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1532.011988][T20093] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 18:09:04 executing program 0: 18:09:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) 18:09:04 executing program 5: 18:09:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:04 executing program 3: 18:09:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup3(r4, r3, 0x0) write$binfmt_misc(r8, &(0x7f00000014c0)=ANY=[@ANYBLOB='q'], 0x1) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r9, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942ce72590f1bf41d20d4c", 0x55}], 0x4, 0x0) 18:09:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32], 0x1c}, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$getown(0xffffffffffffffff, 0x9) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r6, 0x2) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) recvmmsg(r0, 0x0, 0x0, 0x2, &(0x7f0000004e40)) [ 1532.363836][T20108] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1532.372475][T20108] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 18:09:04 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) 18:09:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000180025000000000000000000020000000000ff000000000008000b000001000061a171bebbd0acc613af3c00f1d1841722849042aa6f8e62e32398ebe6e495788c0e724e135e1456f567399dc8eaef18a54ed3b0f9bf171f3fef86bc0b57d87079ab4e3ed73bc6efd1ca589b657c7e8100a03082f3a509ac8d83f11e5af3f763547ba7637e1e5d1126348191186f98868b59e5d781f9719eee547366f18f7e748af74d435be57acc81b4f5afdcd405e9e8684bae3387aeb918d2160a079da9e086f915e11e29407829645aba74e787c659c3adbbfe3ccfb118b50baeeb2d7ebe9f47aac4caae9078f2"], 0x24}}, 0x0) [ 1532.573978][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1532.580918][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) 18:09:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x80fe) [ 1532.717616][T20337] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:09:04 executing program 1: 18:09:04 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) syz_open_procfs(0x0, 0x0) 18:09:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0) 18:09:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) accept4(r0, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f00000002c0)=0x80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000001c0)=0xfffffffe, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 18:09:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) 18:09:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x81}) 18:09:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0) 18:09:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) 18:09:05 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000c1) 18:09:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x3, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, [], 0x6}, {0x0, 0x7f, 0xeb}]}}) 18:09:05 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) 18:09:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) 18:09:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0) 18:09:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0800b5055e0bcfe87b0071") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:09:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) 18:09:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:05 executing program 1: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) clone(0x802102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') sendfile(r2, r3, 0x0, 0x7ffffffd) write$P9_RMKDIR(r3, &(0x7f0000000040)={0x14, 0x49, 0x1, {0xc}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xbff]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 18:09:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) 18:09:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0800b5055e0bcfe87b0071") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d2", 0xd1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1533.937363][T21121] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:09:06 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 18:09:06 executing program 0: perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) [ 1534.048458][T21160] input: syz1 as /devices/virtual/input/input76 18:09:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x98, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0x98}}, 0x0) 18:09:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) 18:09:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) [ 1534.234698][T21217] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:09:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) 18:09:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x40045436, 0x0) 18:09:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8}]}]}, 0xa8}}, 0x0) dup3(r2, r1, 0x0) 18:09:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x98, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0x98}}, 0x0) 18:09:06 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 18:09:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) [ 1534.561574][T21309] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1534.597990][T21314] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:09:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) [ 1534.632532][T21309] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:09:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) 18:09:06 executing program 1: clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit(0x0) 18:09:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x98, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0x98}}, 0x0) 18:09:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 18:09:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) [ 1534.944221][T21465] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:09:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 18:09:07 executing program 3: 18:09:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) 18:09:07 executing program 0: 18:09:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:07 executing program 3: 18:09:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 18:09:07 executing program 0: 18:09:07 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) 18:09:07 executing program 0: 18:09:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:07 executing program 3: 18:09:07 executing program 1: 18:09:07 executing program 0: 18:09:07 executing program 3: 18:09:07 executing program 1: 18:09:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 18:09:08 executing program 2: [ 1535.933954][ C0] net_ratelimit: 20 callbacks suppressed [ 1535.933977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1535.946267][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:08 executing program 0: 18:09:08 executing program 3: 18:09:08 executing program 2: 18:09:08 executing program 1: 18:09:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:08 executing program 0: 18:09:08 executing program 3: 18:09:08 executing program 4: 18:09:08 executing program 0: 18:09:08 executing program 2: 18:09:08 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r0, 0x0, 0x0, 0x800000000002) 18:09:08 executing program 1: 18:09:08 executing program 3: 18:09:08 executing program 2: 18:09:08 executing program 4: 18:09:08 executing program 0: 18:09:08 executing program 1: 18:09:08 executing program 3: 18:09:08 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r0, 0x0, 0x0, 0x800000000002) 18:09:08 executing program 2: 18:09:08 executing program 4: 18:09:08 executing program 0: [ 1536.744021][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1536.750373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1536.757121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1536.763595][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:08 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:09:08 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1000, @mcast2, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xa808) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, 0x0, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x41395527) getpid() 18:09:08 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x80) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000008c97659a56525a4d65ae95dc03372d0000000001000000000000000141000000"]}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x60) 18:09:09 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r0, 0x0, 0x0, 0x800000000002) 18:09:09 executing program 0: 18:09:09 executing program 4: [ 1536.962806][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1536.972733][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1536.989622][T21720] devpts: called with bogus options [ 1537.053976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1537.060517][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1537.067258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1537.071893][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1537.073772][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:09 executing program 1: [ 1537.120770][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:09 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10003, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth0_to_bridge\x00'}) timer_settime(0x0, 0x0, &(0x7f00000011c0)={{}, {0x0, 0x1c9c380}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) tkill(r0, 0x1000000000013) [ 1537.174945][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1537.195947][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:09 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) 18:09:09 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) [ 1537.229366][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 18:09:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)) [ 1537.281020][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1537.335609][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1537.381701][T21719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:09 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:09 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x100000000802, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x10aa00, 0x0) r0 = getpid() tkill(r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:09:09 executing program 2: ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) 18:09:09 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 18:09:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1f", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r6 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)) fchown(r3, r7, r5) fcntl$getown(0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) 18:09:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r6 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x0) fchown(r3, 0x0, r5) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) 18:09:10 executing program 3: mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 18:09:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x0) fchown(r3, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) 18:09:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) clock_gettime(0x0, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000480)=""/98, 0x62}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001dc0)=""/144, 0x90}], 0x1}}], 0x3, 0x0, 0x0) 18:09:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:10 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000011c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 18:09:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x1, 0x0) readahead(r0, 0x0, 0x0) 18:09:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18:09:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:11 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup2(r2, r0) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r4, 0x2, &(0x7f0000000840)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x100000001}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:09:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x11e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:11 executing program 3: mprotect(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x0) 18:09:11 executing program 2: 18:09:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:09:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) pwritev(r2, &(0x7f0000001780)=[{0x0}, {&(0x7f0000001300)='$', 0x1}], 0x2, 0x0) 18:09:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000980)=[{&(0x7f00000005c0)="e5", 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 18:09:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:11 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) dup2(r2, r0) 18:09:11 executing program 1: 18:09:11 executing program 0: 18:09:11 executing program 4: 18:09:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:11 executing program 1: 18:09:11 executing program 0: 18:09:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r1, 0x0, 0x0, 0x800000000002) 18:09:12 executing program 4: 18:09:12 executing program 3: 18:09:12 executing program 2: 18:09:12 executing program 1: 18:09:12 executing program 0: 18:09:12 executing program 4: 18:09:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:12 executing program 1: 18:09:12 executing program 2: 18:09:12 executing program 3: 18:09:12 executing program 0: 18:09:12 executing program 4: 18:09:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:12 executing program 1: 18:09:12 executing program 2: 18:09:12 executing program 0: 18:09:12 executing program 3: 18:09:12 executing program 4: 18:09:12 executing program 1: 18:09:12 executing program 0: 18:09:12 executing program 2: 18:09:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:12 executing program 3: 18:09:12 executing program 4: 18:09:12 executing program 1: 18:09:13 executing program 2: 18:09:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:13 executing program 0: 18:09:13 executing program 3: 18:09:13 executing program 4: 18:09:13 executing program 1: 18:09:13 executing program 0: 18:09:13 executing program 3: 18:09:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:13 executing program 2: [ 1541.213878][ C1] net_ratelimit: 16 callbacks suppressed [ 1541.213902][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1541.226787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1541.233615][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1541.239941][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:13 executing program 1: 18:09:13 executing program 0: 18:09:13 executing program 3: 18:09:13 executing program 4: 18:09:13 executing program 2: 18:09:13 executing program 4: 18:09:13 executing program 1: 18:09:13 executing program 0: 18:09:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) 18:09:13 executing program 3: 18:09:13 executing program 2: 18:09:13 executing program 1: 18:09:13 executing program 4: 18:09:13 executing program 2: 18:09:13 executing program 0: 18:09:13 executing program 1: 18:09:13 executing program 3: 18:09:13 executing program 4: 18:09:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 18:09:14 executing program 2: 18:09:14 executing program 0: 18:09:14 executing program 3: 18:09:14 executing program 2: 18:09:14 executing program 1: 18:09:14 executing program 4: 18:09:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) [ 1542.173832][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1542.180584][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:14 executing program 2: 18:09:14 executing program 1: 18:09:14 executing program 0: request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000001c0)='dns_resolver\x00', 0xfffffffffffffffe) 18:09:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000540)=0x800) 18:09:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) 18:09:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 18:09:14 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:14 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x4001000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0x44, &(0x7f0000000440)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "7d9761", 0x0, 0x3a, 0x0, @remote, @remote, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@rand_addr="39346a1e1d3142e82d30b842eda2813d", @remote, @ipv4={[], [], @remote}, @ipv4={[], [], @broadcast}, @empty, @rand_addr="10330d592475574c4b7da3b069931d1f", @rand_addr="579c6a9bee8f7f4eef8d3ffbb92fec8d", @remote, @mcast1, @mcast1]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@mcast2, @local, @dev]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4, @ipv4={[], [], @dev}, @local, @remote, @mcast1, @mcast2, @mcast2, @dev]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@local]}], @dccp={{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bcf223", 0x0, "dd65fb"}, "52cd86a15dc5a89e79176553f46628f07cd34782ee95596d95fe04b810ebd10204d4820f19a64d0d356afbf1df70570dc2c12f595085dc806e9bfa3fe9645a798a178ed99392d0e588a03f3e8280de34a53792b1a8476435545584146520cf001b137fab3984bc9204f85caecefae6c020113e8a07285a1b36bb138173a839861e080bffc8a764374c28b1c84be4a522cffa0cd2ed5392bff5b0ad3d8d36ecaefba6d6119c3e0c17a7a05094d029c26c6675eb7d3102a55568b3e8fca4874d10475f4d3c05e0a91b86697e9a40eeafff449e079a28db9ef03810f1fcbd3c7574222e330b7015"}}}}}}, 0x0) 18:09:14 executing program 1: r0 = gettid() setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0xe) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 18:09:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x0) 18:09:14 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) r1 = getpid() tkill(r1, 0x9) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:09:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x0) 18:09:14 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfffffcb7) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:09:14 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) [ 1542.974238][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1542.976100][T24278] QAT: Invalid ioctl [ 1542.980597][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1542.990878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1542.997648][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:15 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 18:09:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') pread64(r2, 0x0, 0x0, 0x0) 18:09:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x14cc81, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 18:09:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000600)='\x00', 0x1, r0) keyctl$read(0xb, r1, &(0x7f0000000500)=""/216, 0xd8) 18:09:15 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0xf001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000340)={0xffffffffffffffe0, 0x5}) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) getsockname$netlink(r1, &(0x7f00000003c0), &(0x7f0000000580)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x0, 0x3}, 0x3c) listen(0xffffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) gettid() ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000002c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00x\x00\x00'], 0x6}, 0x0) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r2 = geteuid() setreuid(r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006, 0x810, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x8040) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) 18:09:17 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) 18:09:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xf51}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r1 = geteuid() setreuid(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) 18:09:17 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/127, 0x7f}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000001880)=""/4096, 0x7ffff000}], 0x1, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='attr/current\x00') ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000240)) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000ff000000004000006c6283c49ce42a000511a8110000ffe995000074abab53f9d63f7ff207b0fea12ad19cc4e2b82a3dc93b6083b4f3b46d08e0acdedc46ed146a695d62b36958671d0000372eb9686800a92d8d9a8108dbdd70934d0f970ceb1e0f5bf18a554f2c821e8acd80033d1ce4c7e1378bea53bf6e452ab975589680b414c9b6437abf7f7df6fbd5b31a6fcece36c939c857ba02b6d16ce68194b78ea79b63eda767d7fbe56b343e5774bcaaf99f28721338dda5af18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffff0000, 0x4}) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 18:09:17 executing program 5: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:09:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') fchmod(r0, 0x0) 18:09:17 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8e18) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r1, 0x0, 0x8001, 0x8000) r2 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r1) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 18:09:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(0x0, 0x0, 0x7fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8080000003f) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) 18:09:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x7fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8080000003f) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 18:09:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0xffffffff) read(r1, &(0x7f0000000280)=""/11, 0xb) r2 = syz_open_pts(r1, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) dup3(r2, r1, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000240)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) read$FUSE(r5, &(0x7f0000003200), 0x1000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="6cbb74a6", @ANYRES16=r6, @ANYBLOB="000229bd7000fcdbdf250e00000008000500daa60000"], 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x80) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') sendfile(r7, r7, &(0x7f0000000000)=0x12c, 0x1008147c) 18:09:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) 18:09:18 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self//exe\x00', 0x3, 0x0) fchown(r3, 0x0, 0x0) 18:09:18 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e2f66696c653000ff31a299ca042e37f7b1ad6b3e910c411d6c6aa98d8851fa8a0f45ca76011b873ce0fbd6a900000041cbc3cf740e8a70530000000000002452000000000000010000000098490d077aaf9544666aa81d54b9f85142108e909d7e3b3bb2c0459f6ab0a6da6040"], 0x10) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) [ 1546.351280][ C0] net_ratelimit: 14 callbacks suppressed [ 1546.351305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1546.363594][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:18 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8202adfd4319799effffff6530130fb9aa23d0571454d78a2a197a386207000000008295955984c87910bf093f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58b55c62bffa4d012ae447473c230495aaee48c02f6ac41e6bf3bf554799b9b800ed52beb85a85e25bfb258557d60f13ad30505e8f53f8a4aeef9d612f871f4385f04157795ea4a5c59a3a9fa202361ca1d8cac7dbbc5b65c6593d2870b4122cd2350000000000000000000000000000ceb34b0dc06c1c7122de504b508dba0bf3960c25a453a1a1316403df19599398932afae4d9a74b46efe5d53e683791f6d2ab561eaaed07d9b073f0a36223838fc75655ca9ee130238f9a5084f95184b88b64a30c5f05c5f5d073b2c6340666759f4cbb0cb1b61b14287cd89924160358f632ee86f0bb7f3c3d8e23ecfaf63357b136b7a886f646ba6551df94e6f3c8236cb69229fd5ce2610c4b134799e452db2817a0d6"], 0x10) 18:09:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8080000003f) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) 18:09:19 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0) fchmod(r1, 0x0) 18:09:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x7fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8080000003f) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) 18:09:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) 18:09:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 18:09:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) [ 1547.134016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1547.140561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1547.147223][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1547.154462][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x4d0c7882b96b95f7, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80c40, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000000c0)=""/50) r5 = dup(r3) r6 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222040) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0xfffffffffffffc1e, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="9a07000000e8003c260f348c8a348c8af4c8d3641fb966ba410066b89e001f00d8efb902090000b800000000ba000000800f30b805000000b9e10000000f01c1b8010000000f01d9b933030000b84d000000ba000000000f3066ba430066b80070e5ae", 0x63}], 0x1, 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x2000000080803, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f0000000280)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) 18:09:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1c, 0x0, 0x98f, 0x3}) 18:09:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000409000)=0x0) r2 = socket(0x10, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f0000002940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1547.454030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1547.460507][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1547.467065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1547.473469][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1547.566770][T26449] bond0: (slave bond_slave_1): Releasing backup interface 18:09:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000f0d25123cc244f42931088026f7609b47043ca11380da9d3b68a98fcc1a9deed39d524477bed81a6d7e7442563f687d6e7e6afa7ec824bdf306734eebaf3ac275ce84ee8e8fa8261f5cbd09e7441716ec75fb44cf0d0fe3c20"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000014c0)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0xf98, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ed167000d8141dd3e9d6a3111dcddb7525394c79bc497dbfc05cb4a2ca8e317266950ea2220555a2222c2b623a8f12f5a70478680682741e2013146785f9cb28e8f3f837f6c6dde2fd76d6db0c2330fe86344a417b299730ee93b8069ec3b00738597573e0fbf5e613e456b4d0b66de36d31409286130a2f6fadae6ec978d733a6d98a51bb8774226f73ccb76756dc89e21076f327d88818a76bfbe736d41f174068a196b72959aa72d3b298e5deea88af2848395541b740071e2b31c17cac3e5da1a15f634e5d6c8d78d7c51cfb15ca5f4d6e9cd7932eba421f083b1a0d683496ab322b21fd6bd524cce66316df9c43eb262ea26ba1c8bcca6d21c3b7f6d1b992573529e1c355d13976cf6aabd01e04f1cd84e10d5abbe03bba9de6e7cb617defdc7a3b4ed4e3d86e32d4dcad0f859b800c5303d3bf1d0b81c6fb64b2bb02bf6422d6b148daab5bdd1b46f53fa64c74b6e57740f9ad286c6cc05bb1dbf40f0d40a1e53898c74736229d0f9554ca0755c38d4ed365e3cbea89c7a2c1d2cdc32f254aa326272e19b5cd76b529cf28a4d2102dd7e202429ee6955c9413fc44b783e8bb7586569193489d1358098daec39272adecf0ad7def247c9f96f5c6ece25bd2b1b03f40b899b4d5739e2ee2760abc4918bfbe94e96ffdc44656e4e84eb8d6c069c2e3936e06a6ae886667ba603e04468b2e36a3e4cf6997f0324222d41dce5b35a86b190cad0c637a7edab79d1bf99dc2de160858f534a1b2266aff0b6ac3b42a15ad6e70ace753aa1ad3a62eac0881fa2583367c215a329ed98e7e9c1824a6c6086308957732abb321d1da594568dc4a091f9e086cd9e772a6cf4936aa398a26e54f54168112430fd1787fb76a35468d1ba18115870892d740d923863c6dead22f71d9bb85ee17b42add51e5c26a339eb2aaa99c4d3ac9e1de3b239a508cc50864cea8df249c5c6b37a1372d433db732fcf1afedc282db551af7cd3eb5fcebe821cdeca2640309d25366ac34d0508c124437524ae8096184e168a6b9aab195d4697b46080bde7090febd3bc4d79ae7365ce9bb1c87ad12aa6f9d3bd9787e6ce822e660fd8f423c4a8818210c5dcdf7a36ffdacd14cb42a8fab3f5664dc789b3e22426565c483ac7978426615d5c91123c6ec409d2bee075be534e00e6342b4b3254681a25246271802ef6e1be0034ad4687405d05241a0cd76d9c7ab12d8c01273ebe3f3daa550b6dc52a0683a9b070f08f3a910f7bdcde0f6b944e0345911c1c8697665eef63a66b3ede9a921bc793dd50330f6c606b51219dc9853a4278d0a4ffa8454f72b550fd71de26f0f07723d495e7bd14c915cb71d1295463a83de9c6b95b9f624e41febea6ec2d49378893abc86b0b78dedcaab9426336f64f69a2f396b656c00b57f17adb1914b8cbade6db66bbde5eea03a05a4fb02f247c0565dbcb37a4e6424c16ab3fd4bff6bea2c59d8cf634f220be1d23f4f0504682f7fa8e3afb645852228c9bd8eb6612026915bfcb72cd46388c9035e60911eec9533d306595b4743d9766ec39f951f12aacee2e9c92b500be936595b24c48cea3b39f33f8280b2dcb5bc1ea72e77e3a5b09a9e287b44d9277b587721dc5d0a2ceec51cbc776455f74b67e7b49ce7f0e9b5533745ffe698bf209513f5328a01cdc78382a1de99a82972bad6e3f335debc81719629ee02f02ddf9dfcde21538ca99a2d588c9e74fde38fa02e309cc9007c8110fa3eecaa40ffb6bb5fc40df5fe417e4bb9ab954236a6a4a2f489e60bf6d998944dd9e208b2a6c9965d52d14ce2d852c3433b5f4be2814a0c72a6db28452ffef2534e6ca03cd14079db62803b00fb57d34d27c571c8532bde3439eb83d555f442c3df36fa9e4ee6a6093164486012b6fafbd643bf37b3d419c8c0992569b9d3cb90bdc175e2f45583e60bfe790d9d7f92f0c84ac7bb924833bf727d312159e1dfa8f0eb53cd670744685dfe92535b41eebde18de1085cd3f5d1ba88f132d43e128b09fd148f44fea64d1c95ab4b339d69797dc6a138dee7399703634e6a05189cecf6a6aeebe9c94030b0ab9f48b67c93e4820de1dc967e95794e7f898d27b0aa364c36ae6bbab07096e7757dfe598e43d964b5519936391d6f4daeb617bbbbbc20bcdc8b093d5bb6bcd1213ab01d66a2e4475e3600defcd96e7a34405be94a8f0ca2b7309773dd0229853c2263c90e9b5ee80763c521f02b644a2554ce7985918fd4d77cffb61dd7725b6c5be8cbf0247b2f44a2fb54cefe54bac3b0d41bf123b1669428add8edd9bdc3c38c6c290f3088433710da07b6c037e357fee4f8c9d86bc02c99e9c6741b730e77819950d989c258a731d8ef8fd002f61460b27aed9ceb740d62449126d653314ba6ddc7071118e564445869bb6d69ecb2b4bef502805343a917ad21154095bbc7f038a53e0bdc6e76598ba0a6e8e85e288e45f8511bbc60c6e60958eff5b755ab89b67ceccd67adb08ca6b721982433cf6566b4adc588d84a4d11bacb4c13a1d7af84de3e3d5dfe5584b57bf7329aaf07fff6318efdccd24a4f64df7bf8b88fcec0eaf617a31caa16b41426140b33c54f3c9ee4da09da4a9347627cdd50f0723f23964cc43e3d24160e23a358126159666234805f3dfe5d37f749c5eb2c502506a58827de355f10b176a9f8e5608099ec08bc6a1c627ff4e474e11a819123b81e58f93ccb17003032f5ec15a5a9545f924cd68e929c69f8524680bf959802663f74726974e8722e34451519abee97ed57b560b19397ced95b4739adeda1786865c0523d88f2499d0a64aaf555d5b312ede9491a84e6fcc7c244c093e40e46e7f17cea86e70efc4a41cf43dd4dc0af3f47de5ef48e78d664c140d1a55d6eb5bade1a99041d27434f7a822cf8f3625077ef42b49c7b2a3404ad406e7fbc28e3464f4fb572c57380d9b427e6e274f54737195be89aa14def5359826fc597abf2a8424d962c27b46d8f9c2c7e9b994c9e9e2956df5208e5fa19b01f4c7f5a14e3829316809b2244845d9437d5469e59a78465628ed3b6ebd7164149ea87fb0ee6bcbb4fd2ca067a4b8657a996d246e5db480cedd17ece5bebd8ad31ab0aed1704c0ba7a18c7b30eccad9b4e9a4ebde953c5171490648c254f0656e21e03f268b25b79c3de70e21bda06ea354eef6e2484cf664ab81c16f4b37637f32b1e10c9e32a94863a23a4473fa3f99b334f64e7045a47a4f6d723d2830aac866169b4a1f2fbe625a56506a75d3aa919aa8c12c75b676e9c0f9b85706aec6727a44239881e186728e8f3a75799ab5d39e11467a4860bd59548068e81d347bfbd7fd5d72c4bf2c0cfd8d46708fa9fdfff39915dbcdec20ea90144f1b08cb7ddade649e8aced754dad351d9066e3509d659b43b1f5c4ea8289480e99ee16cfacf816513e56e875454f59a676d295eecb566fff932ed435f95933add3e0c5deceba25732336571b6ca33a96bd0b7f02e6d1d4041c4e706a23effa7804b16c03a5e513857b0e0f5a6b9f3b6f99ec36007d00da036372019e64352efbd26110be7bcc50cf8192dca328608784331625e56b2309d0c8642876776b15cdbf0d4092e9795bc9e7664e44cfba0d6ac09600b750c19f0c584c8e49b046d638fdd581b882e3c7972d8a30c128c1da988ece0d7451111df917ec9b0b01b1436ddaa31e5bef1dcdc622ae8c7887bf1b2f158bcb1516029bcd96876b92d01fc4674d3e6dbce0b0a497ff1276bddca8ad1e6c34ff073a0aa6daac3824ddb80249b048c46a91910be4576b953b143a38fc0d8119c8caf693da8b47858d01d12deafaf36525ee703b1b06aa86d6168290865b61416f610a4c55bfbfc1d480724bf5427bb7242f2132502f1900d10381a48b1dbc890e003b7a2bb1de229375bdfa73f15a710378496888d512492fbded360034761de86868119e96b55cdbe990f9df55df1feed216162ef6e8cc25e2f18f32c8db8cbbdce084c819b33b2c65585f1e9a8f0f9c579a6ec592740ba7070d8fb6b954d8dc6beed0d336bcb15a970ce0ddf18c424444687d302dc2fb172f923bd4e7b4194617f7226c31ad2708d31c7e973e019995779c776c506f898252b77684ca0eaa7916d68a3cb65f5b7ae559ec44338fd621662fde4ce062cb518b05a0f5f007e170c8cb721f4cfcf2a110a9833e8a8e556088887569b2b892784ed1aa025202ee0505eeaacc78c38948e5c084d5770beef84d0ff1953e6cad36222ea76985a95f08c295bd760224deea538dc9b2240cd258bbf852cc6a08c698d8c416a0e9c4f05fceceb9671b04e67f281621e3d4143bfcb6228d85c1cc0d78478dca909c615f21d5a4eb1a4b45593749d2eb083679478f60c1f3094327c295970594ceb886c6101a577572280576a90b3d3b8a891b649757373fa054c8995582f794651007b127af68714ef892eb718f9aa70894f5f4ab309152ec5498fb6bd78e29e857d40251e5393c83c59cfdd232998eaf82a08f63fbf99d226a418f1da2a63484d2019d4b73784cd863cdfed7523c480dcf94263d5fe5983841fa896b29d0c5b25415596a778b2443ff392325496d95114f916fabe6b69241cc8b3946248d6ea341ac0bf53257b6cb4277908aef247758b14a13f199cd7a15e19760f2258b89d7343ed59d4e4fd3de13f096c86906af11934feadfd00ae9c012a1dafd02b99c7d4415849c0702784c4482a18eea93820d0b54858f4307f41a344b165db9ed5d09c4bf8847cbdbeda5e766ba37529278862929893e5a83e04b8572343497423d6f00a703ccff69d6d555b1a383e57cd6ea4530f6833dc6966837c4b7ce621fcd6fe420b0d08bb4596b9f8fc460c437adc378667159eb54fecef8d04405dfc15048035b7cfa52cbccd3de1c9c272a838325101546e1b4f1a87a9b5ee42d698e1030c1e8db3e358252cae569025d87a76803b4edabd107eef774b288bb76ddc0f2601ffa0a868171f349a127061ea011d1a13218ce722511a4962e0dc81b908f1a686093badbbc0bedc612d439719ba8ca1465899f5d26c4b88596a669e59a130902138254f0cd7ad662839be9bfbd868e1489330dd1acf898b6b8f2b9c3bc92fd08b66a5c4824007ef63f12356aeb83a08216971844401da757adaefe93fc6932614b1989580c13ebfb4f6bf15d4ab92611843ca4b9ef8cee97a26329eb10b00c734ba451cc2829e1e1ae90fc01a04e2703e92bb011927fbe9c9361255c655806654a3e778cb160c727d36f794f421b4cda6368f2d432916c219c78711e1ebee9942dc13cf54a263fa10c86d074c81197a425b6940bcf876ea662e1d4daebb18fc0d8b73e910a4372bc10b05bee0f6c6f7501af5e05801f935d8a3145a9c5d495a4a2d06342ea71e907632ce41b57d99ce9fc86d019c155442fc19b3f6241605a1e2abff417e84a08b7bebacbb25230245993832d3aa660bca2eebde20e4d2c2acfc19528402962c3da2e497da8e833eaae52ca5cf5169e16608e9f045bf5745ad4c1eb35669313fbbb484477679aab7ac6b035f85962f5d4fd9c2a69f416e7376b2708d9abbc67d9331a44f1137e92bd18c7d13395d41c43152dc4eeb5eefe58ecc371737bec7f24a6024d"}}}}}, 0xfca) 18:09:20 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:20 executing program 5: 18:09:20 executing program 3: 18:09:20 executing program 4: 18:09:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:20 executing program 1: 18:09:20 executing program 3: 18:09:20 executing program 5: 18:09:20 executing program 1: 18:09:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:20 executing program 4: 18:09:20 executing program 3: 18:09:20 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:20 executing program 4: 18:09:20 executing program 5: 18:09:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:20 executing program 1: 18:09:20 executing program 3: 18:09:20 executing program 4: 18:09:20 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:20 executing program 5: 18:09:20 executing program 4: 18:09:20 executing program 1: 18:09:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:20 executing program 3: 18:09:20 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:20 executing program 5: 18:09:21 executing program 1: 18:09:21 executing program 4: 18:09:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:21 executing program 3: 18:09:21 executing program 5: 18:09:21 executing program 1: 18:09:21 executing program 3: 18:09:21 executing program 4: 18:09:21 executing program 5: 18:09:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:21 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:21 executing program 1: 18:09:21 executing program 4: 18:09:21 executing program 3: 18:09:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:21 executing program 5: 18:09:21 executing program 5: 18:09:21 executing program 1: 18:09:21 executing program 3: 18:09:21 executing program 4: 18:09:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:22 executing program 5: 18:09:22 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:22 executing program 1: 18:09:22 executing program 4: 18:09:22 executing program 3: 18:09:22 executing program 5: 18:09:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:22 executing program 5: 18:09:22 executing program 3: 18:09:22 executing program 4: 18:09:22 executing program 1: 18:09:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:22 executing program 5: 18:09:23 executing program 4: 18:09:23 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) clock_gettime(0x0, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 18:09:23 executing program 3: 18:09:23 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:23 executing program 1: 18:09:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:23 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 18:09:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x5a) 18:09:23 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006fc0)) 18:09:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) 18:09:23 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000011c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 1551.624000][ C1] net_ratelimit: 16 callbacks suppressed [ 1551.624023][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.636552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1551.643304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1551.649674][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:24 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:24 executing program 4: setreuid(0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, 0x0, 0x4000000000dc) 18:09:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x45e) 18:09:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3, 0x1c) 18:09:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f00000001c0)=0xfffffffe, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) close(r4) [ 1552.031111][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:09:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) dup(0xffffffffffffffff) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x9) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x4) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:09:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 18:09:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48bb7a9dbe30fcc0ee3c0d19fc464240758595e7eb33de379d54b1bb38a0e4a0f889ec0c3fba40525614e260a798c62e2171b48742723f0000cde52e8a2eeadce33f9d6de553764b2dc37cd776ae9bc72c0b81fe59309fd1ad681f592a81fc06e67513252392cd38fb", 0x86) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x2b, 0x6}) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') 18:09:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x1}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 1552.573930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1552.580070][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:25 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800ae06000bcfe87b2071") write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 18:09:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:09:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) [ 1553.374059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1553.380697][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1553.387513][ C0] protocol 88fb is buggy, dev hsr_slave_0 18:09:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x14cc81, 0x0) 18:09:26 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) setuid(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) creat(0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) getresuid(0x0, &(0x7f0000002c00), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 18:09:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 18:09:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}}) 18:09:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:26 executing program 2: socket$inet6(0xa, 0x80003, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:26 executing program 5: r0 = socket(0x10000000011, 0x8000000003, 0x0) sendto$unix(r0, 0x0, 0x0, 0x801, 0x0, 0x0) 18:09:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:27 executing program 5: clock_settime(0x0, &(0x7f0000000680)={0xc000000}) 18:09:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:27 executing program 3: clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) exit(0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 18:09:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) sendfile(r0, r1, 0x0, 0x20000102000007) 18:09:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:27 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @remote, @dev}}}}, 0x0) 18:09:27 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:27 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:27 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x3}}}}}, 0x0) 18:09:27 executing program 5: 18:09:27 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:27 executing program 5: 18:09:28 executing program 3: 18:09:28 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:28 executing program 5: 18:09:28 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:28 executing program 4: 18:09:28 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:28 executing program 4: 18:09:28 executing program 5: 18:09:28 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:28 executing program 3: [ 1556.734088][ C0] net_ratelimit: 15 callbacks suppressed [ 1556.734110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1556.746509][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:28 executing program 3: 18:09:28 executing program 5: 18:09:28 executing program 4: 18:09:28 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:29 executing program 4: 18:09:29 executing program 5: 18:09:29 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:29 executing program 3: 18:09:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:29 executing program 5: 18:09:29 executing program 4: 18:09:29 executing program 5: 18:09:29 executing program 3: 18:09:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:29 executing program 4: 18:09:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) [ 1557.534004][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1557.540492][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1557.547356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1557.553826][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:29 executing program 3: [ 1557.853810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1557.860073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1557.866626][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1557.872890][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:30 executing program 5: 18:09:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:30 executing program 4: 18:09:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:30 executing program 3: 18:09:30 executing program 3: 18:09:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2284, &(0x7f0000000000)) 18:09:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0014f9f407000904000a00000000000000000000000800190000000004", 0x24) 18:09:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x0, 0x0) 18:09:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0xb4fc41273d9083f6, 0x0) 18:09:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup2(r3, r0) tkill(r1, 0x1000000000016) 18:09:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 18:09:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:09:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:09:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/127, 0x7f}}], 0x1, 0x0, 0x0) 18:09:31 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:31 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:31 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 18:09:31 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:31 executing program 5: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x2) 18:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:31 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="34efff00ffe724000095aca42d657f93700cfe9983b835b712b579fb6caede9beeb876ae00"], 0xe) socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x1) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e000000100600"], 0x19) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x39, &(0x7f0000000000)=[{}]}, 0x10) 18:09:31 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:31 executing program 5: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 18:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x100000]}) 18:09:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae7", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:09:32 executing program 5: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x1) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e000000100600"], 0x19) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x39, &(0x7f0000000000)=[{}]}, 0x10) 18:09:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(0x0, 0x2800) 18:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 18:09:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 18:09:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xcce30e8a2ab0309a, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r3, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) shutdown(r3, 0x1) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 18:09:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:32 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:32 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0x5e, &(0x7f0000000600)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @remote, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3}]}}}}}}}}, 0x0) 18:09:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="200000006800130800000000a90300000200000000000000080005000200000000000001f36b6744254ffe2e4173a157dcd8d2476d04795b93bfc6afb407dcb7d4380144abbbb4bc9481b435845656e6f859b78cc7d5ece9a6f60d9485b06f1ffb80abb4b5010000edd147fe757a3cc10ed9abb12edfa687bd902808a5605d1b73d76ea549e2012287087c9acc01ec20b742f700000000000000f6dc99133f0800007f302b0130919f3f4889eead5a8bb1be110c149cd634197c9ff810d6f56c338fe8f6f900f8a14c6f015aa5a0e80a088ea01a35d1379de0190f43ea540e", @ANYRES32=0x0], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000e7eb2460779bb96b02baed1ae61b8749bd94c86063b58dbad3b18a6232db8c86bbfde91cf2a61f7e433b3cb95c2a3e6e1fe375c982263d3c03b56163b5ac6a12d9b22159e663e9ae28d5e09a610408f433681bfb1dc07c33d00171aea02b", @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000004000500"], 0x18}}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 18:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 18:09:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd", 0x76}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x100000]}) 18:09:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:09:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:09:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) 18:09:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x100000]}) 18:09:33 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) keyctl$get_persistent(0x16, r4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) creat(0x0, 0xfffffffffffffffe) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32], 0x1c}, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$getown(0xffffffffffffffff, 0x9) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004e40)) 18:09:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x100000]}) 18:09:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000007a0a00bf000000009500000000000000e7658855d5e2cbf75343e57165cdbd182e28b136cc5415031a8a4ecb98c26cc3e174956c131f"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 18:09:33 executing program 5: 18:09:34 executing program 5: 18:09:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) [ 1562.014921][ C1] net_ratelimit: 16 callbacks suppressed [ 1562.014945][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1562.027685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1562.034556][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1562.041052][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:34 executing program 4: 18:09:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:34 executing program 5: 18:09:34 executing program 4: 18:09:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d1438733ca9997fb677a0b480f808e1251c0fbac0790ad0cf944599b4b23297e30e613b957bbd0449255697029ec9408003da0c2aca5285838440", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:34 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[]}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:34 executing program 4: r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) 18:09:34 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x4c00, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e50bfb0d61e18fbd2fe6a5dd80009d00010801000000000300f87f00006400", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 18:09:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 18:09:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) [ 1562.840122][T30424] __nla_validate_parse: 4 callbacks suppressed [ 1562.840149][T30424] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1562.856426][T30424] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor.4'. 18:09:34 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:09:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, 0x0) 18:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) 18:09:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) [ 1562.974271][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1562.980768][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000140)='&@[\x00') 18:09:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0xffffffffffffffec) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpua\x9d]\x00\xea\x8b\xdd./cct.usage_all\x00', 0x26e1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0xce) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) write$cgroup_pid(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) socket$kcm(0x2, 0x2000000000003, 0x2) close(r0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socket$kcm(0x10, 0x0, 0x10) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) 18:09:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:35 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[]}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:35 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 18:09:35 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:09:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18:09:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) [ 1563.773922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1563.780236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1563.787099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1563.793532][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:35 executing program 1: clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x1d2, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xfe67}], 0x3, 0x0, 0x2c9}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13f40f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="8a7cfcb0bd543a07372504167b"], 0x0, 0xd}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:35 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:09:36 executing program 1: 18:09:36 executing program 5: 18:09:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:36 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[]}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800080000b7", 0x22) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:36 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:09:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x12d48122) 18:09:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) 18:09:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000240)) 18:09:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000240)) 18:09:36 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000240)) 18:09:37 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:37 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x3, 0x0, 0x8020001) 18:09:37 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x10, 0x5b, &(0x7f0000000580)="5ae02efc441a80536af0d1d96ac717fa", 0x0, 0xf002, 0x0, 0x0, 0x0, &(0x7f0000000040)="4fbf0c86b383344179d88791cca78dc8a0646965b7c9ece50305f8859ba177e5a5071c42299ba4f1824494ff57a97f1489bdc6e4c425d9a5fbad3c804d2609f94fd8d9c6cab5454e238c6b2adc5132c88a151a7f7d203439eecb9bf44f9102023d3d0c836336f287493b85a870c1e4054bc277679a70a12d1aeffcf9f188f64d3c4c06b8cd6a3ebb2535f74a2ffe36961539acc94eb710b3beb1b9f365ce01349282600de431c8152b4ad27a3fee3407", &(0x7f0000000100)="1bd32fa29f558ffb40dcd09779eb697201800000000000001f6b93"}, 0x28) 18:09:37 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x368, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffe4}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45ceecc872b56070000000000000036bc9e892451c93db0ed05311b9e56d77397f8640cef47628488498f2c8c6624e7329e5b17f60fe94e963686", @ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef"], 0x0, 0x78}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:37 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xb0ff20, 0x1, 0x11, r0, 0x0) 18:09:37 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) [ 1565.511029][T31412] binder_alloc: binder_alloc_mmap_handler: 31411 20ffb000-213fb000 already mapped failed -16 18:09:37 executing program 5: clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xb0ff20, 0x1, 0x11, r0, 0x0) 18:09:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 18:09:37 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x66}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={0xffffffffffffffff, r0}, 0x10) [ 1565.806628][T31524] binder_alloc: binder_alloc_mmap_handler: 31523 20ffb000-213fb000 already mapped failed -16 18:09:38 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:38 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x800000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000001, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.current\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) 18:09:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x8010aebb, &(0x7f00000000c0)) 18:09:38 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x800000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000001, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'team_slave_0\x00', 0x5000}) unshare(0x8000400) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1308000036fff101c06b782895719700000600"], 0x13) dup(r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="00000017600104008e0900120000571d000000006af082f176878ec9572f358e14aa0e5f0a090000000387a7c94cf1e28fdbccb95119928e4386445c790e9855be0475be265a70e9551385b66ffed639d2e3"], 0x52) 18:09:38 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) [ 1566.388360][T31740] sg_write: data in/out 262460/40 bytes for SCSI command 0xa-- guessing data in; [ 1566.388360][T31740] program syz-executor.5 not setting count and/or reply_len properly 18:09:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:38 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x233, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x6, 0x3}]}}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x2, 0x300c0040) 18:09:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:09:38 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) [ 1567.156818][ C0] net_ratelimit: 14 callbacks suppressed [ 1567.156842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1567.168859][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:39 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:39 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:39 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) close(r1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="39000000142787613d0ab9cb0cba36b7656582a85780e693ac90b4912c1e5ad9106f17225ca7d987f16a09d0676904000000002c000500018701546f08000000041e48000088", 0x46}], 0x1}, 0x0) close(r0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r2, &(0x7f0000002840)={&(0x7f0000000100)=@nameseq={0x1e, 0x2, 0x0, {0x0, 0x8800}}, 0x10, 0x0}, 0x0) 18:09:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:09:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000100)="bd384ce1f54f7c522811c090bbf4ef7b4926a15e53a1bbb46854e2666d3327c6ae8e714ad8116298b6e23a4b036512e680d8864f6e29ae93b95733e5d0164691a37189b857a07bae4ee2995204e470c4c5ae2742f1a98076174e9420fa41857fbd21c794423e7851022eb84c0059c29ec119542880d2e770e56b498dfc425e4fdc7abdf6be20499b8bb6eb267a31a66c683c0feb6ecc488f3a2dc72e6db795aad7b717787df3b8e32eba76dddafc94c432d52ad8d07cc2cd9e3831e868ed4781c75508b8b07196c7b2", 0xc9, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c03000610046eea000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x265}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) 18:09:39 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:09:40 executing program 3: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000200)=[{&(0x7f0000000000)="39000000120081ae00003c9733f5f087110008abca8b4e7d0f6298cb85d0b0e62bdbb7d553b4e921556b3d5df500c250825702000000000000", 0x39}], 0x1}, 0x0) 18:09:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) [ 1567.934013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1567.940383][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1567.947215][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1567.953645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1568.254063][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1568.260332][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1568.266963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1568.273326][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:40 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:40 executing program 3: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003a0081aee4050cecdb4cb9040a485e510befccdf7f3e9cf0758ef900e1cf3aebb1cb4c100c0003720000", 0x2e}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001200)=""/241, 0xf1}, {0x0}], 0x3}, 0x0) 18:09:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 18:09:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) r2 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:09:40 executing program 3: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x3}, {0x16}]}) 18:09:41 executing program 3: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:41 executing program 5: bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x10, 'cpu'}, {0x2d, 'rdma'}, {0x2d, 'memory'}, {0x0, 'rdma'}, {0x2b, 'memory'}, {0x2d, 'pids'}, {0x2d, 'memory'}, {0x2b, 'memory'}]}, 0x37) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="85000000000000000fb331c6610000950000000b676a1738bd8cb4988c263f9ebac80e09c9bd6cad6f73f2f2bb8ec5fc5cc6ce6125d2e1e049d5954da6660b7477fe3d9f671e2c5fcc8a33ae09b02cdee7c7b233aac362292421394048788402c07cdbb4e2c95ebb54600c7873866adc74722f60e684c0f464f3137c0753c5017f0000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x26) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 18:09:41 executing program 1: bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) r0 = socket$kcm(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa19, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, r1, 0x7, 0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) r3 = openat$cgroup_ro(r2, &(0x7f0000000a40)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000a80)) gettid() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="230000005a00817491bc655067d7aee4050c00000f00020005000000acecf0a3000000", 0x1d7}], 0x1}, 0x0) [ 1569.371203][ T896] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 18:09:41 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:41 executing program 3: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:41 executing program 4: 18:09:41 executing program 5: 18:09:41 executing program 1: 18:09:41 executing program 4: 18:09:41 executing program 1: 18:09:41 executing program 5: 18:09:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:42 executing program 3: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:42 executing program 4: 18:09:42 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:42 executing program 1: 18:09:42 executing program 5: 18:09:42 executing program 4: 18:09:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:42 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:42 executing program 1: 18:09:42 executing program 5: 18:09:42 executing program 4: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='@', 0x1, 0xfffffffffffffffb) 18:09:42 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getdents64(r1, &(0x7f0000000500)=""/4096, 0x1000) 18:09:42 executing program 5: 18:09:43 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff8070000", 0x11) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:43 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:43 executing program 1: 18:09:43 executing program 4: 18:09:43 executing program 5: 18:09:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 18:09:43 executing program 4: 18:09:43 executing program 5: 18:09:43 executing program 1: [ 1571.208783][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:43 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 18:09:43 executing program 5: 18:09:43 executing program 1: 18:09:43 executing program 5: 18:09:43 executing program 4: 18:09:43 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:43 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff8070000", 0x11) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 18:09:43 executing program 1: 18:09:44 executing program 4: 18:09:44 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:44 executing program 5: [ 1571.934074][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, 0x0, 0x0) 18:09:44 executing program 4: 18:09:44 executing program 1: [ 1572.423694][ C1] net_ratelimit: 16 callbacks suppressed [ 1572.423708][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1572.435754][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1572.442015][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1572.448318][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:44 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff8070000", 0x11) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:44 executing program 5: 18:09:44 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:44 executing program 4: 18:09:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, 0x0, 0x0) 18:09:44 executing program 1: 18:09:44 executing program 4: 18:09:44 executing program 1: [ 1572.629703][ T1173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:44 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) lseek(r1, 0xfffffffffffffffc, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r1, 0x0, 0x0) 18:09:44 executing program 5: 18:09:44 executing program 4: 18:09:45 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:45 executing program 1: 18:09:45 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:09:45 executing program 0: 18:09:45 executing program 5: 18:09:45 executing program 4: 18:09:45 executing program 0: 18:09:45 executing program 1: 18:09:45 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 18:09:45 executing program 5: 18:09:45 executing program 4: [ 1573.367903][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1573.378196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1573.378772][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:45 executing program 0: 18:09:45 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:45 executing program 5: 18:09:45 executing program 1: 18:09:45 executing program 4: 18:09:45 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 18:09:45 executing program 0: 18:09:46 executing program 0: 18:09:46 executing program 1: 18:09:46 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) [ 1574.034451][ T1213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:46 executing program 5: 18:09:46 executing program 4: 18:09:46 executing program 0: [ 1574.184018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1574.190500][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1574.197263][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1574.204084][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:46 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:46 executing program 1: 18:09:46 executing program 5: 18:09:46 executing program 4: 18:09:46 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:09:46 executing program 0: 18:09:46 executing program 4: 18:09:46 executing program 5: 18:09:46 executing program 0: 18:09:46 executing program 1: [ 1574.753166][ T1233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:46 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:09:46 executing program 5: 18:09:47 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800", 0x1e) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:47 executing program 1: 18:09:47 executing program 0: 18:09:47 executing program 4: 18:09:47 executing program 5: 18:09:47 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:09:47 executing program 4: 18:09:47 executing program 1: 18:09:47 executing program 0: 18:09:47 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 18:09:47 executing program 5: 18:09:47 executing program 1: 18:09:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x5a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 18:09:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) 18:09:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) 18:09:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 18:09:48 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:48 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 18:09:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) fallocate(r0, 0x12, 0x0, 0xe5) [ 1576.110641][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 18:09:48 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 18:09:48 executing program 1: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x1) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e000000100600"], 0x19) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 18:09:48 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='4'], 0x1) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x46, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x400, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 18:09:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setreuid(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 18:09:48 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) 18:09:49 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) setreuid(0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 18:09:49 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) 18:09:49 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x39, &(0x7f0000000000)=[{}]}, 0x10) 18:09:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r1, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f0806eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0) 18:09:49 executing program 5: r0 = open(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=0xfef, 0x4) listen(0xffffffffffffffff, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000001c0)=0x400000) setregid(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) 18:09:49 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) [ 1577.068616][ T1716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 18:09:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0) 18:09:49 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) 18:09:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000004e00), 0x40000000000023c, 0x0) [ 1577.533908][ C0] net_ratelimit: 14 callbacks suppressed [ 1577.533929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1577.546160][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:49 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) 18:09:50 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) 18:09:50 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) 18:09:50 executing program 1: mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8004401f071, 0xffffffffffffffff, 0x0) 18:09:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e2000000", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 18:09:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) [ 1578.152575][ T2472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x11, 0x4) 18:09:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(0x0) keyctl$get_persistent(0x16, r2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) creat(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32], 0x8}, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000004e40)) 18:09:50 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002f", 0x12}], 0x1}, 0x0) 18:09:50 executing program 0: add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740)="ad", 0x1, 0xfffffffffffffffb) [ 1578.344041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1578.350574][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1578.357316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1578.363770][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:50 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002f", 0x12}], 0x1}, 0x0) [ 1578.655768][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1578.661942][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1578.668500][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1578.674794][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:51 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700000000000000000000000800", 0x1c) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:51 executing program 5: 18:09:51 executing program 0: 18:09:51 executing program 4: 18:09:51 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002f", 0x12}], 0x1}, 0x0) 18:09:51 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000001100)={&(0x7f0000000bc0)={0x2, 0x0, @initdev}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="18", 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) r2 = semget(0x1, 0x0, 0x2) semctl$SETALL(r2, 0x0, 0x11, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$ndb(0x0, 0x0, 0x4200) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x0, 0x1000, 0x0, 0x5, 0x8}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 18:09:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:09:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:51 executing program 0: [ 1579.077795][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:51 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe39", 0x1b}], 0x1}, 0x0) 18:09:51 executing program 0: 18:09:51 executing program 4: 18:09:51 executing program 0: 18:09:51 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:51 executing program 1: 18:09:51 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe39", 0x1b}], 0x1}, 0x0) 18:09:51 executing program 4: 18:09:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:51 executing program 4: 18:09:51 executing program 1: 18:09:52 executing program 0: 18:09:52 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe39", 0x1b}], 0x1}, 0x0) 18:09:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) [ 1579.920513][ T2924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:52 executing program 4: 18:09:52 executing program 1: 18:09:52 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:52 executing program 0: 18:09:52 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a60", 0x1f}], 0x1}, 0x0) 18:09:52 executing program 4: 18:09:52 executing program 1: 18:09:52 executing program 1: 18:09:52 executing program 0: 18:09:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) [ 1580.616094][ T2946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:52 executing program 4: 18:09:52 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a60", 0x1f}], 0x1}, 0x0) 18:09:52 executing program 1: 18:09:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:53 executing program 0: 18:09:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:53 executing program 4: 18:09:53 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a60", 0x1f}], 0x1}, 0x0) 18:09:53 executing program 1: 18:09:53 executing program 0: 18:09:53 executing program 4: 18:09:53 executing program 1: [ 1581.305631][ T2967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:53 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017ed", 0x21}], 0x1}, 0x0) 18:09:53 executing program 0: 18:09:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:53 executing program 1: 18:09:53 executing program 4: 18:09:53 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:53 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017ed", 0x21}], 0x1}, 0x0) 18:09:53 executing program 0: 18:09:54 executing program 1: 18:09:54 executing program 4: 18:09:54 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:54 executing program 0: [ 1582.028315][ T2989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:54 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017ed", 0x21}], 0x1}, 0x0) 18:09:54 executing program 0: 18:09:54 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:54 executing program 1: 18:09:54 executing program 4: 18:09:54 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:54 executing program 0: 18:09:54 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edca", 0x22}], 0x1}, 0x0) 18:09:54 executing program 4: 18:09:54 executing program 0: setpriority(0x0, 0x0, 0x6) 18:09:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8001) [ 1582.762648][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:54 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) [ 1582.813924][ C1] net_ratelimit: 16 callbacks suppressed [ 1582.813947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1582.826467][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1582.833114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1582.839544][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:09:54 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edca", 0x22}], 0x1}, 0x0) 18:09:54 executing program 4: getrandom(0x0, 0xd1, 0x0) 18:09:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 18:09:55 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:55 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edca", 0x22}], 0x1}, 0x0) 18:09:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x272) sendto$inet(r0, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) 18:09:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 18:09:55 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) [ 1583.485531][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:55 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:09:55 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) 18:09:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f00000001c0)='g', 0x1, 0xfffffffffffffffb) [ 1583.773909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1583.780439][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:55 executing program 0: r0 = gettid() setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0xe) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socket$inet(0x10, 0x803, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 18:09:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:56 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff80700"/26, 0x1a) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:56 executing program 3: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x1942, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) 18:09:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:56 executing program 4: futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x0) 18:09:56 executing program 0: 18:09:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4fff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 18:09:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 18:09:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) [ 1584.573834][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1584.580199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1584.586851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1584.593109][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:09:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() r1 = syz_open_procfs(r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r2) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, 0x0) write$eventfd(r3, 0x0, 0x0) fdatasync(0xffffffffffffffff) accept$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x8400, 0x0) [ 1584.641879][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:57 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000340)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c58163d042fbe907c", @ANYRES16, @ANYBLOB="000429bd700000000000010000000000000008410000001400180000001269623a6970365f76746930"], 0x3}, 0x1, 0x0, 0x0, 0x840}, 0x60) 18:09:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x1000, 0x5d4a, 0x58d7b901f14eef54}}}, 0x28) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='system.sockprotoname\x00', &(0x7f0000000640)=""/166, 0xa6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) [ 1585.098251][ T4197] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1585.108245][ T4197] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 18:09:57 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x1000000000800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x20) 18:09:57 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x0, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 18:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001e0087ca000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000101900000800"], 0x20}}, 0x0) 18:09:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x2bb, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5f9, &(0x7f0000000180)) 18:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x9, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000000000000200010001000000000000edfffd000005"], 0x49}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:09:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:09:57 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x0, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:57 executing program 0: msync(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) 18:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) fchown(r1, 0x0, 0x0) 18:09:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) 18:09:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 18:09:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:58 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x0, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:58 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 18:09:58 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceeca1, 0x0, 0x0, 0xffffffffffffffae) io_setup(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) 18:09:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) 18:09:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:58 executing program 4: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$getregset(0x4205, r0, 0x0, 0x0) 18:09:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:58 executing program 1: clock_adjtime(0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$void(r0, 0x5451) 18:09:58 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0) 18:09:58 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001000)=""/4098) 18:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:09:58 executing program 0: madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 18:09:59 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:09:59 executing program 1: 18:09:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 18:09:59 executing program 0: [ 1587.933792][ C0] net_ratelimit: 14 callbacks suppressed [ 1587.933807][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1587.945948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1588.733860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1588.740181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1588.746772][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1588.752964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.053738][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.060075][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.063274][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.063274][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:01 executing program 1: 18:10:01 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:10:01 executing program 4: 18:10:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 18:10:01 executing program 0: 18:10:01 executing program 3: 18:10:01 executing program 0: 18:10:01 executing program 3: 18:10:01 executing program 1: 18:10:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 18:10:01 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:10:01 executing program 4: 18:10:01 executing program 3: 18:10:02 executing program 0: 18:10:02 executing program 5: 18:10:02 executing program 1: 18:10:02 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:10:02 executing program 4: 18:10:02 executing program 5: 18:10:02 executing program 0: 18:10:02 executing program 1: 18:10:02 executing program 3: 18:10:02 executing program 5: 18:10:02 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:10:02 executing program 4: 18:10:02 executing program 1: 18:10:02 executing program 0: 18:10:02 executing program 3: 18:10:02 executing program 5: 18:10:02 executing program 1: 18:10:02 executing program 4: 18:10:02 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 18:10:02 executing program 3: 18:10:02 executing program 5: 18:10:02 executing program 0: 18:10:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:02 executing program 4: socket$inet6(0xa, 0x0, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffbfffa}, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='\x16\xeb\x00', 0x200002, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x8a, 0x8, 0x3, "00124acf1556146b379d962f96b63d5452e2a86e34edca3554cdab200e4379b0df40db6ed9c985625a8015cad9c9977e12a128fd0061cc79b1b4b83c1fc2d507237839fbd8814ec069335bb4aaa89fb3cfe40cd03d9aeafac053671b36e0a6bad0109e049ae1a085339e05f237ac7d7e0555702af3e33733628b2d751acdbee2803522cef758b75ea8e3"}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8001) write$cgroup_int(r1, &(0x7f0000000080)=0x1a001b00, 0x297ef) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001880)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) mkdir(&(0x7f00000004c0)='./file1\x00', 0x4) 18:10:02 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000011c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 18:10:02 executing program 5: 18:10:02 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 18:10:03 executing program 0: 18:10:03 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 18:10:03 executing program 5: 18:10:03 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x80) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000008c97659a56525a4d65ae95dc03372d0000000001000000000000000141000000"]}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c58163d042fbe907c", @ANYRES16=r1, @ANYBLOB="000429bd700000000000010000000000000008410000001400180000001269623a6970365f76746930"], 0x3}, 0x1, 0x0, 0x0, 0x840}, 0x60) 18:10:03 executing program 1: getrusage(0xfffffffffffffffd, 0x0) 18:10:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000001000)=""/4098) [ 1591.278416][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1591.288529][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:03 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffbfffa}, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='\x16\xeb\x00', 0x200002, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0xb8, 0x8, 0x3, "00124acf1556146b379d962f96b63d5452e2a86e34edca3554cdab200e4379b0df40db6ed9c985625a8015cad9c9977e12a128fd0061cc79b1b4b83c1fc2d507237839fbd8814ec069335bb4aaa89fb3cfe40cd03d9aeafac053671b36e0a6bad0109e049ae1a085339e05f237ac7d7e0555702af3e33733628b2d751acdbee2803522cef758b75ea8e3a78344d59417b6157062475df56a8f03ce549691338db96c0c4048f9cc0f55602170c266d4fc1927f6d86669035b"}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8001) write$cgroup_int(r1, &(0x7f0000000080)=0x1a001b00, 0x297ef) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000140)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001880)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) mkdir(&(0x7f00000004c0)='./file1\x00', 0x4) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0xc0305710, &(0x7f0000000140)) 18:10:03 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 18:10:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:10:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7}}) [ 1591.434734][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1591.474010][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1591.497658][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:03 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2fefdbfaa}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0xb, 0x81) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:03 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) [ 1591.539471][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1591.596106][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1591.643838][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) [ 1591.689494][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:03 executing program 3: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$getregset(0x4201, r0, 0x0, 0x0) 18:10:03 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) [ 1591.744955][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000004e00), 0x40000000000023c, 0x0) 18:10:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a40000", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:04 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 18:10:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') sendfile(r2, r3, 0x0, 0x6052b11e) 18:10:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 18:10:04 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 18:10:04 executing program 5: keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) 18:10:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f00000002c0)=@sco, 0x0, &(0x7f0000000080)=[{&(0x7f00000024c0)=""/4096}, {&(0x7f0000000600)=""/214}], 0x0, &(0x7f0000000700)=""/127}}, {{&(0x7f0000001780)=@rc, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/237}, {&(0x7f0000001900)=""/150}, {&(0x7f00000019c0)=""/108}, {&(0x7f0000001a40)=""/115}, {&(0x7f0000001ac0)=""/246, 0xfffffffffffffdac}, {&(0x7f0000001bc0)=""/143}], 0x0, &(0x7f0000001d00)=""/255, 0xfffffffffffffcd7}}], 0x400000000000334, 0x26, &(0x7f0000003700)={0x77359400}) 18:10:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 18:10:04 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x10000000003, 0x9) r4 = dup2(r3, r3) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="24000000fa0307041dfffdd46fa2830020200a0009ed0300001d85680c1ba3a20400ff7e280000005304ffffba16a0aa1c0009b356da5a80d18b6e06e9fd62662455a4df49d05343793cec4c", 0x2a4}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) [ 1593.213783][ C1] net_ratelimit: 16 callbacks suppressed [ 1593.213806][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1593.226110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1593.232585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1593.239025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1594.173693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1594.179881][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942ce72590f1bf41d20d4c", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 18:10:06 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 18:10:06 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/127, 0x7f}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000001880)=""/4096, 0x7ffff000}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:10:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae", 0x48}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a400000000", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:06 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x1c1842, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:10:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655e", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x9, 0xc, 0x100000000000914, 0x5}, 0x19) [ 1594.973957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1594.980324][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1594.987009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1594.993477][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:07 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 18:10:07 executing program 3: 18:10:07 executing program 5: 18:10:07 executing program 4: 18:10:07 executing program 1: 18:10:07 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 18:10:07 executing program 0: 18:10:07 executing program 3: 18:10:07 executing program 5: 18:10:07 executing program 1: 18:10:07 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 18:10:07 executing program 4: 18:10:07 executing program 5: 18:10:07 executing program 3: 18:10:07 executing program 0: 18:10:07 executing program 1: 18:10:07 executing program 2: 18:10:07 executing program 4: 18:10:07 executing program 5: 18:10:07 executing program 0: 18:10:07 executing program 1: 18:10:07 executing program 3: 18:10:08 executing program 2: 18:10:08 executing program 4: 18:10:08 executing program 5: 18:10:08 executing program 1: 18:10:08 executing program 0: 18:10:08 executing program 3: 18:10:08 executing program 4: 18:10:08 executing program 2: 18:10:08 executing program 5: 18:10:08 executing program 1: 18:10:08 executing program 0: 18:10:08 executing program 3: 18:10:08 executing program 4: 18:10:08 executing program 1: 18:10:08 executing program 2: 18:10:08 executing program 5: 18:10:08 executing program 0: 18:10:08 executing program 4: 18:10:08 executing program 1: 18:10:08 executing program 3: 18:10:08 executing program 2: 18:10:08 executing program 5: 18:10:08 executing program 4: 18:10:08 executing program 0: 18:10:08 executing program 3: 18:10:08 executing program 2: 18:10:08 executing program 1: 18:10:08 executing program 5: 18:10:08 executing program 4: 18:10:09 executing program 3: 18:10:09 executing program 2: 18:10:09 executing program 0: 18:10:09 executing program 1: 18:10:09 executing program 5: 18:10:09 executing program 2: 18:10:09 executing program 0: 18:10:09 executing program 5: 18:10:09 executing program 3: 18:10:09 executing program 4: 18:10:09 executing program 1: 18:10:09 executing program 0: 18:10:09 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) 18:10:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 18:10:09 executing program 4: clone(0x8000100000206, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 18:10:09 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 18:10:09 executing program 1: clock_adjtime(0x0, &(0x7f00000002c0)) 18:10:09 executing program 0: 18:10:09 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') fcntl$setflags(r0, 0x2, 0x1) 18:10:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) 18:10:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) creat(0x0, 0x0) 18:10:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r2, r0) 18:10:09 executing program 2: unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffa) 18:10:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 18:10:09 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) 18:10:10 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7530}) 18:10:10 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0) 18:10:10 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) keyctl$update(0x2, r0, 0x0, 0x0) 18:10:10 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) 18:10:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(0x0, 0x0) [ 1598.248530][ T8033] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1598.257204][ T8033] __nla_validate_parse: 4 callbacks suppressed [ 1598.257228][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1598.273389][ T8033] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1598.282168][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:10:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)) 18:10:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x228880, 0x0) poll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, 0x0) [ 1598.334006][ C0] net_ratelimit: 14 callbacks suppressed [ 1598.334029][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1598.346378][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:10 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) keyctl$update(0x2, r0, 0x0, 0x0) 18:10:10 executing program 4: setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001100)={{0x0, @loopback, 0x0, 0x0, 'ovf\x00', 0x8, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 18:10:10 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 18:10:10 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) keyctl$update(0x2, r0, 0x0, 0x0) 18:10:10 executing program 2: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) 18:10:10 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:10:10 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) 18:10:11 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f0000000000)) 18:10:11 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) keyctl$update(0x2, r0, 0x0, 0x0) 18:10:11 executing program 2: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) 18:10:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:11 executing program 0: socket(0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = gettid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffdc7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$int_out(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0xffffffffffffff22) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) tkill(r0, 0x1000000000016) [ 1599.134039][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1599.140537][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1599.147517][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1599.154019][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:11 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) 18:10:11 executing program 5: r0 = gettid() setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0xe) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socket$inet(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 1599.188913][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 18:10:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8004401f071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001500)=[{0x0}, {0x0}, {&(0x7f0000001440)="13c522f843fb9c34712ed25649c4233d418325f3adefbaa3dfc43074d51a7e131039a8a07ec0d790828dfe979d1831f481e762cfde03c5", 0x37}, {&(0x7f0000000240)}], 0x4) socket(0x10, 0x80000000000802, 0x0) shutdown(r1, 0x0) recvmmsg(r0, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) open(0x0, 0x145042, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1599.270766][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000015000)=0x1004, 0x4) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @dev}, 0x10) listen(r1, 0x0) [ 1599.330672][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1599.399287][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:11 executing program 3: add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) [ 1599.453888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1599.460179][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1599.466786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1599.473082][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:11 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 18:10:11 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:10:11 executing program 3: add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) [ 1599.609974][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1599.685930][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1599.769624][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 18:10:11 executing program 3: add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) [ 1599.947663][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1599.972541][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1600.008690][ T8855] kvm [8850]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8004401f071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001500)=[{0x0}, {&(0x7f0000001440)="13", 0x1}], 0x2) socket(0x0, 0x80000000000802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) 18:10:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000091"]) dup3(r1, r3, 0x100000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="03f726bd7000fbdbdf250000000000000c0002000800050008000000caa76130aff43f3e06ea8993"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x8) r4 = gettid() wait4(r4, 0x0, 0x1fc3eefc60d41d48, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(r5, 0x40b, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$vsock_stream(r8, &(0x7f0000000000), 0x10, 0x800) 18:10:12 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x800, 0x80000) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000200)={0xa55, 0x3, 0x9, 0xb2a}) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x3, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r2, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000440)='/dev/usb/hiddev#\x00', 0x4, 0x40) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0xfffffffffffff801, 0x800) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/../raw#\x00', 0x1, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) r3 = syz_open_dev$hidraw(&(0x7f0000000180)='/dev/../raw#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0xc0c0583b, 0x20000000) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000080)) write$hidraw(r3, &(0x7f0000000180), 0x0) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r4, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r5, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) r6 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x1c0, 0x81, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0x387}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x80, 0x80}}}}}]}}]}}, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000fc0)=ANY=[@ANYBLOB="0a06da4bf065d87cc072d6f97c00040000cd50020103035ff400d2b2e5176d57d340fa6ddf7f9cc69e4c95a8fb6eec9365f2baedebe8112df15e4bb575734b371ff3fa004de77f94a2904383279f4594d5e087aa955da81da1c5aad8786f7a3b066ed81f30943d12a7ce049da4812d806e41c8c702673657427fbcb28721b35c13b6a2dd4881118695"], @ANYBLOB='\f\x00\x00\x00', @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYBLOB="050f0c000107100204657f00"], @ANYBLOB="0200000002100000", @ANYPTR=&(0x7f0000006280)=ANY=[@ANYBLOB="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"], @ANYBLOB="b200f700", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="b20329df6137296cd5766384ac00a84674ff3be7c152aaa20124298847da5ff92c6e1f1f25f9b54761157bcfb0911de6e97a270b8e7b3b33c884becc5b23505f524c66de59703070035558de092e70315949bbea3d27970a0928c1975213ebea2061b9fbb94ed3151816f953bdc6bfe0290b45d8b5ced164e27bf3ced33cb7ed50a8d99f74562c831d7ea950792a880f8d62e333b61cca94d51c1adb8d05c3ff6ccd6af947b0a997a57ef18d38be8fd40762"]]) syz_usb_control_io$hid(r6, &(0x7f0000000d00)={0x24, &(0x7f0000000b80)={0x20, 0x7, 0x8f, {0x8f, 0x30, "21ad36c70357fe650a84a085d83e9a4e444517a616c4cae8edefb740f11fd304351a84ef185d167118f5ad815f5084c5999b9f350cafc8d3ca43164bee3340f1b552a2a38bc553756f74ee45771deaf4bd78a242ce150edb8d03ed6a1a120234bbdb2ba1b7d9d26e40a52a1a89c00caefec48361aae5d64274e0a1e4ca536d82191f134ae07fe1c2caa50c10ba"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f0000000c80)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "e4af3313"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x1, 0x0, 0xf81fad2180ef9f4a, "f0"}, @global=@item_4={0x3, 0x1, 0x7, "09066a89"}]}}, &(0x7f0000000cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x8f2}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000f00)={0x20, 0x1, 0x12, "125cea8498cc67802a0b90455563775b3805"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0x7}}) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x7, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x3f, {{0x6, 0x24, 0x6, 0x0, 0x1, "b9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x5, 0x55, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x1e3, 0x0, 0x9, 0x8}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x20}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x266, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3c3, 0x73, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x0, 0x3f, 0xe0, 0x40, 0x2}, 0x0, 0x0, 0x2, [{0xf42, &(0x7f0000001240)=@string={0xf42, 0x3, "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"}}, {0xa, &(0x7f0000000240)=@string={0xa, 0x3, "81e550b02c1f4fb4"}}]}) 18:10:12 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) 18:10:12 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fd) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 18:10:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @dev}, 0x10) listen(r1, 0x0) 18:10:12 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) 18:10:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f90", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\b\xc0\xbf4\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1600.516864][T11832] usb 5-1: new high-speed USB device number 50 using dummy_hcd 18:10:12 executing program 5: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8004401f071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001500)=[{0x0}, {0x0}, {&(0x7f0000001440)="13c522f843fb9c34712ed25649c4233d418325f3adefbaa3dfc43074d51a7e131039a8a07ec0d790828dfe979d1831f481e762cfde03c5dbe36188186e4aae4e45f50718ace68e6872309213452e058e9f40ec49e03dc065b4b7c2351e1c9ed3009257070890da2fbf89ca1e2934", 0x6e}, {&(0x7f0000000240)="f1df9d874e42d27579d4fad661c7920b1621b1f1008f977798d0641f4ae34910a4f638", 0x23}], 0x4) socket(0x10, 0x80000000000802, 0x0) recvmmsg(r0, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) 18:10:12 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffc) 18:10:12 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x2000000000000006, &(0x7f0000000300)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open$cgroup(&(0x7f0000000480)={0x4, 0x70, 0x95, 0x1, 0xff, 0x8, 0x0, 0xb848, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000340), 0x8}, 0x2c404, 0x4, 0x7, 0x3, 0x7, 0x200, 0x6}, r2, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x3b0, 0xee68, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffefffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0xfffe}, 0x0, 0x1, r3, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x20) inotify_init1(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x10000000004053a, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000200)={0xfeffffffffffff81}, 0x8, 0xf8c2f2aa8204b0cf) r7 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet6(r7, 0x0, 0xffffffffffffff69) r8 = dup(r7) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0xd84161b7992131a) write$cgroup_type(r8, &(0x7f0000000100)='threaded\x00', 0xffea) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x1}}, 0x3c9a6e0ace6e5de7) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(r8, &(0x7f0000000080)='threaded\x00', 0x163) 18:10:12 executing program 2: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 18:10:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1600.793876][T11832] usb 5-1: device descriptor read/64, error 18 18:10:12 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) [ 1601.193589][T11832] usb 5-1: device descriptor read/64, error 18 [ 1601.473658][T11832] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1601.743488][T11832] usb 5-1: device descriptor read/64, error 18 [ 1602.133504][T11832] usb 5-1: device descriptor read/64, error 18 [ 1602.253678][T11832] usb usb5-port1: attempt power cycle 18:10:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x80000001) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') sendfile(r3, r4, 0x0, 0x6052b11e) 18:10:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9", 0x85}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0900000000003639408fa3a3ba", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 18:10:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) 18:10:14 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 18:10:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@ipv4={[], [], @multicast1}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 18:10:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653a899be85363940aed12f0000db2f00000022f1f169a400000000000000", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) 18:10:14 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 18:10:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/239, 0xef}], 0x1, 0x0) 18:10:14 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) 18:10:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x0, 0x0, 0x0) 18:10:14 executing program 4: 18:10:14 executing program 2: 18:10:15 executing program 2: 18:10:15 executing program 0: 18:10:15 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) 18:10:15 executing program 4: 18:10:15 executing program 2: 18:10:15 executing program 5: 18:10:15 executing program 1: 18:10:15 executing program 4: 18:10:15 executing program 2: 18:10:15 executing program 5: 18:10:15 executing program 1: 18:10:15 executing program 0: 18:10:15 executing program 3: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) 18:10:15 executing program 4: 18:10:15 executing program 5: 18:10:15 executing program 2: 18:10:15 executing program 1: 18:10:15 executing program 0: [ 1603.623805][ C1] net_ratelimit: 16 callbacks suppressed [ 1603.623826][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1603.635971][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1603.642447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1603.648789][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:15 executing program 5: 18:10:15 executing program 4: 18:10:15 executing program 3: 18:10:15 executing program 2: 18:10:15 executing program 1: 18:10:15 executing program 0: 18:10:15 executing program 4: 18:10:15 executing program 5: 18:10:16 executing program 3: 18:10:16 executing program 2: 18:10:16 executing program 1: 18:10:16 executing program 4: 18:10:16 executing program 5: 18:10:16 executing program 0: 18:10:16 executing program 3: 18:10:16 executing program 2: 18:10:16 executing program 1: 18:10:16 executing program 5: 18:10:16 executing program 4: 18:10:16 executing program 0: 18:10:16 executing program 3: 18:10:16 executing program 1: 18:10:16 executing program 2: 18:10:16 executing program 5: 18:10:16 executing program 4: 18:10:16 executing program 0: 18:10:16 executing program 3: [ 1604.573990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1604.580266][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:16 executing program 1: 18:10:16 executing program 5: 18:10:16 executing program 4: 18:10:16 executing program 2: 18:10:16 executing program 0: 18:10:16 executing program 3: 18:10:16 executing program 1: 18:10:16 executing program 4: 18:10:16 executing program 5: 18:10:17 executing program 2: 18:10:17 executing program 0: 18:10:17 executing program 3: 18:10:17 executing program 1: 18:10:17 executing program 4: 18:10:17 executing program 2: 18:10:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) 18:10:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$void(r0, 0xc0045878) 18:10:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x4000000092d8) 18:10:17 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffffffffffffbc) 18:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) 18:10:17 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x100) 18:10:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000000200)) [ 1605.373869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.380246][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1605.386802][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.393152][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 18:10:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000002440)=""/166, 0xa6}, {&(0x7f00000003c0)=""/65, 0x41}], 0x5, &(0x7f0000002580)=""/183, 0xb7}}, {{&(0x7f0000002640)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002740)=""/162, 0xa2}, {&(0x7f0000002800)=""/187, 0x347}, {&(0x7f00000028c0)=""/240, 0xf0}, {&(0x7f0000004080)=""/39, 0x1c}, {&(0x7f00000029c0)=""/121, 0xffffffffffffff98}], 0x5, &(0x7f0000000240)=""/18, 0x12}}, {{&(0x7f0000002ac0)=@nfc, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002b40)=""/77, 0x4d}, {&(0x7f0000002bc0)=""/227, 0xe3}], 0x2, &(0x7f00000040c0)=""/49, 0x32}}, {{&(0x7f0000002d00)=@hci, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/220, 0xdc}, {&(0x7f0000002e80)=""/187, 0xbb}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x3, 0x0, 0x352}}], 0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) 18:10:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000200)) 18:10:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000500)='./bus\x00', 0x210000, 0x0) 18:10:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:10:17 executing program 5: timerfd_create(0x5, 0x0) 18:10:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000280)=0x54) 18:10:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000012c0)={'filter\x00'}, &(0x7f0000000000)=0x54) 18:10:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffffffffffe68, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) 18:10:18 executing program 3: syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) 18:10:18 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 18:10:18 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x80) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) wait4(0x0, 0x0, 0x1, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c58163d042fbe907c", @ANYRES16=r1], 0x2}, 0x1, 0x0, 0x0, 0x840}, 0x60) 18:10:18 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) fdatasync(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:10:18 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x4001000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 18:10:18 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x2}) [ 1606.414928][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1606.424874][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 18:10:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) mremap(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000268000/0x2000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x7f12856cac1ab1af, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) 18:10:18 executing program 0: exit(0x0) 18:10:18 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socket$unix(0x1, 0x0, 0x0) 18:10:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x40000000000010, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 18:10:18 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000100000018"], 0x0) 18:10:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000091"]) r4 = dup3(r1, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03f726bd7000fbdbdf250000000000000c0002000800050008000000caa7"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40) write$eventfd(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000340)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r9) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e23, @rand_addr=0x4}}) 18:10:19 executing program 5: dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00'}) open(0x0, 0x0, 0x0) 18:10:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 18:10:19 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80040000008}) 18:10:19 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\b\xc0\xbf4\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) ptrace(0x4206, r0) ptrace$getregset(0x4201, r0, 0x0, 0x0) 18:10:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 18:10:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x7}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x188, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev}, @igmp={0x0, 0x0, 0x0, @local}}}}}, 0x0) 18:10:19 executing program 5: r0 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x81a, 0x4) 18:10:19 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942c", 0x4c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:19 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fd) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r5}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 18:10:19 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffed9, 0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES32, @ANYPTR64, @ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR64, @ANYRES64], 0x0, 0x0, 0x0}) [ 1607.922577][T13234] debugfs: File '13233' in directory 'proc' already present! [ 1607.979902][T13234] debugfs: File '13233' in directory 'proc' already present! 18:10:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f", 0x20}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 18:10:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x23a}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942ce72590f1bf41d20d4c0821", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 18:10:20 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) 18:10:20 executing program 5: syslog(0x2, &(0x7f0000000000)=""/116, 0x74) [ 1608.733679][ C0] net_ratelimit: 14 callbacks suppressed [ 1608.733693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1608.745970][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1609.533728][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1609.539906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1609.546622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1609.552706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1609.853686][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1609.859779][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1609.866181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1609.872229][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0800b5055e0bcfe87b0071") fallocate(r0, 0x11, 0x0, 0x100000001) 18:10:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a12", 0x4d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:22 executing program 1: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:10:22 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 18:10:22 executing program 5: bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 18:10:22 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x803, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 18:10:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000000005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000000000"], 0xb8}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)="87", 0x1, 0x0, 0x0, 0x0) 18:10:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:10:22 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 18:10:22 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') 18:10:23 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="01000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x5c, 0x0) 18:10:23 executing program 3: 18:10:23 executing program 4: 18:10:23 executing program 3: 18:10:23 executing program 0: 18:10:23 executing program 4: 18:10:23 executing program 5: 18:10:23 executing program 2: 18:10:23 executing program 5: 18:10:23 executing program 1: 18:10:23 executing program 4: 18:10:23 executing program 3: 18:10:23 executing program 2: 18:10:23 executing program 0: futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 18:10:23 executing program 5: 18:10:23 executing program 1: 18:10:23 executing program 4: 18:10:23 executing program 3: 18:10:23 executing program 2: 18:10:23 executing program 0: 18:10:23 executing program 1: 18:10:23 executing program 5: 18:10:23 executing program 4: 18:10:23 executing program 0: 18:10:24 executing program 1: 18:10:24 executing program 3: 18:10:24 executing program 2: 18:10:24 executing program 5: 18:10:24 executing program 4: 18:10:24 executing program 3: 18:10:24 executing program 2: 18:10:24 executing program 5: 18:10:24 executing program 1: 18:10:24 executing program 4: 18:10:24 executing program 0: 18:10:24 executing program 2: 18:10:24 executing program 3: 18:10:24 executing program 1: 18:10:24 executing program 5: 18:10:24 executing program 4: 18:10:24 executing program 0: 18:10:24 executing program 1: 18:10:24 executing program 3: 18:10:24 executing program 5: 18:10:24 executing program 4: 18:10:24 executing program 2: 18:10:24 executing program 0: 18:10:24 executing program 2: 18:10:24 executing program 5: 18:10:24 executing program 3: 18:10:24 executing program 4: 18:10:24 executing program 0: 18:10:24 executing program 1: 18:10:24 executing program 2: 18:10:25 executing program 5: 18:10:25 executing program 4: 18:10:25 executing program 3: 18:10:25 executing program 1: 18:10:25 executing program 0: 18:10:25 executing program 2: 18:10:25 executing program 5: 18:10:25 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000000100), 0x8000000000002e3, 0x0) 18:10:25 executing program 3: 18:10:25 executing program 1: 18:10:25 executing program 0: 18:10:25 executing program 5: 18:10:25 executing program 2: 18:10:25 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000600)='\x00', 0x1, r0) keyctl$read(0xb, r1, &(0x7f0000000500)=""/216, 0xd8) 18:10:25 executing program 1: r0 = open(0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ptrace$cont(0x8, 0x0, 0x0, 0xaed) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xc4b36b2e421cc482, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) creat(&(0x7f0000000300)='./file0\x00', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:10:25 executing program 0: r0 = open(0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ptrace$cont(0x8, 0x0, 0x0, 0xaed) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) creat(&(0x7f0000000300)='./file0\x00', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) 18:10:25 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000003) getsockopt$inet_mreqsrc(r0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000040)) 18:10:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 18:10:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18) 18:10:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000000340)) 18:10:25 executing program 0: r0 = open(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f00000000c0), 0x4) listen(0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000001c0)=0x400000) setregid(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdir(0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) 18:10:25 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fec000/0x14000)=nil, 0x6) 18:10:25 executing program 3: bpf$BPF_PROG_TEST_RUN(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x40) 18:10:26 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, 0x0) 18:10:26 executing program 3: r0 = socket(0x18, 0x3, 0x82) getsockopt(r0, 0x0, 0x9, 0x0, 0x0) 18:10:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x11f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1614.022595][ C1] net_ratelimit: 16 callbacks suppressed [ 1614.022618][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1614.034767][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1614.041085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1614.047361][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bpq0\x00'}, 0x18) 18:10:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x20000084, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x80000000}, 0x14) shutdown(r0, 0x1) 18:10:26 executing program 1: gettid() r0 = socket(0x10, 0x2, 0xc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000480)=0xfa5c89ad58456ec) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000d06000)=0x1, 0xffffffc7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000200)={'teql0\x00', {0x2, 0x4e24, @multicast1}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x9, 0x4) r3 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000001c0)='dns_resolver\x00', 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000100)='dns_resolver\x00', &(0x7f00000004c0)='bdevwlan0\x00\xbaQ\xdc\x11\xc1JB\xbdfF\xffW9\xea\x85\xb1\xb6\x84\xdb\x05`2a\xb6@F\x17\x0e%O\xf4Q\xbf\xb2\xceF\x8aL\xed\xa6w\x9dKq\bV\xb0c\x88\x06\t\x06-\xc8\b\xbe]\xf7c}\xc4\xe4\n\x88^\x01\xc9\x17.:!\xed6\x9c\x1b\xf6EFq8p\x02&\xcf\x97\xa0\xd6\xa0\x10\xa7\x9d\x9f\x83s\t\xdd-\xee4\xf9\xc9\x91\x19\x99%\xf9?\x12\xd7_6rP,\x16lg=B\x9a\xb7!\xc5; B\xaf\xc1\x84\r\xfeY\x1b\x8dE=\x8b*\xc6\x83fC:\x1fO\xc0') r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) fsetxattr$security_selinux(r4, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000580)='system_u:object_r:usbmon_device_t:s0\x00', 0x25, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r3, 0x0, 0x25}, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100), &(0x7f0000000140)=""/37) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1f000000010141e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, r6+10000000}, &(0x7f0000000180)) 18:10:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d143873", 0x97}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:26 executing program 5: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x40) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) shutdown(r0, 0x0) [ 1614.228189][T14834] IPVS: Unknown mcast interface: bpq0 [ 1614.370501][T14887] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 18:10:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000008000000000400000061102800000000009500000000000000626327100e157bfdf8fdb0f563f1935ffbecc18921bfb815205e4d1b1b272ef56334c348c10acf2c8fc8aec753dc47b8f46dfbf3013f204275e27f5dfd37fd03e4b4e210218ceb326934a5b62bed2b5fc8db5d0efb5bdaafb23bfacc753b29d56f9e8910211ddc5b71f1f44067b7bc871e9d16c583b5bdbcadfa74a41fd430f49eee44aa80f699b175bce4ef2fa9a17feab4c6032e0bc3ab3c769d02fe240200000059d659df9fd74c3f433df752867effae40e0c6cf91c5b611b4ab9e336c5b7812de435e39fb9cac47e5"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 18:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:26 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x84) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1000d, 0x0) 18:10:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 18:10:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 18:10:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3b5) 18:10:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f90", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\b\xc0\xbf4\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/239, 0xef}], 0x1, 0x0) 18:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) [ 1614.973993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1614.980429][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/250, 0xfa}], 0x1) 18:10:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) write$apparmor_current(r2, &(0x7f0000000080)=@profile={'permprofile ', '/dev/qat_adf_ctl\x00'}, 0x1d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r8, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r8, 0xc058534b, &(0x7f00000004c0)={0x5, 0x5, 0x40, 0x87, 0x1, 0x9}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2063928ccb8ce400"/18, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r9, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf8}, [@map={0x18, 0x8, 0x1, 0x0, r3}, @map={0x18, 0x5, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x3, 0x2, 0x7, 0x0, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x9c, &(0x7f0000000180)=""/156, 0x41100, 0x2, [], r7, 0xe9808e7123b1e664, r9, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0xfffffff7, 0x3}, 0x10}, 0x70) 18:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:27 executing program 4: r0 = socket(0x1, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffff9c) mkdirat(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 18:10:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) [ 1615.201224][T15524] QAT: Invalid ioctl [ 1615.216056][T15524] QAT: Invalid ioctl 18:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:27 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0xbd, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000200)='(', &(0x7f00000000c0)}, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x4000020032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000440), &(0x7f0000001440)=""/193}, 0x20) 18:10:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x100000001, 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:10:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:27 executing program 3: gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x2000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) 18:10:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:27 executing program 1: gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x1, 0xffffffffffffffff, 0x0) open(0x0, 0x2000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 18:10:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) [ 1615.773739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1615.780160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1615.786758][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1615.793309][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') 18:10:28 executing program 5: 18:10:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:28 executing program 5: 18:10:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:28 executing program 1: 18:10:28 executing program 2: 18:10:28 executing program 3: 18:10:28 executing program 4: 18:10:28 executing program 5: 18:10:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:28 executing program 1: 18:10:28 executing program 5: 18:10:28 executing program 1: 18:10:28 executing program 3: 18:10:28 executing program 4: 18:10:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0xe0f}, 0x14}}, 0x0) 18:10:28 executing program 2: 18:10:28 executing program 3: 18:10:28 executing program 1: 18:10:28 executing program 2: 18:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:10:29 executing program 5: 18:10:29 executing program 4: 18:10:29 executing program 3: 18:10:29 executing program 1: 18:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:10:29 executing program 2: 18:10:29 executing program 5: 18:10:29 executing program 4: 18:10:29 executing program 1: 18:10:29 executing program 3: 18:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:10:29 executing program 2: 18:10:29 executing program 4: 18:10:29 executing program 5: 18:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 18:10:29 executing program 3: 18:10:29 executing program 1: 18:10:29 executing program 2: 18:10:29 executing program 4: 18:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 18:10:29 executing program 5: 18:10:29 executing program 3: 18:10:29 executing program 1: 18:10:29 executing program 2: 18:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 18:10:29 executing program 4: 18:10:29 executing program 5: 18:10:30 executing program 3: 18:10:30 executing program 1: 18:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:10:30 executing program 2: 18:10:30 executing program 4: 18:10:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x40) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) shutdown(r0, 0x0) 18:10:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getgroups(0x400000000000023e, &(0x7f00000012c0)) 18:10:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) 18:10:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) openat$urandom(0xffffffffffffff9c, &(0x7f0000001140)='/dev/urandom\x00', 0x0, 0x0) 18:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:10:30 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x40) sched_rr_get_interval(0x0, &(0x7f0000000000)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) 18:10:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x3c}}, 0x0) 18:10:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]]}}}]}, 0x3c}}, 0x0) 18:10:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) geteuid() fchown(r1, 0x0, 0x0) [ 1618.682204][T17062] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 18:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14}, 0x14}}, 0x0) 18:10:30 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 18:10:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) 18:10:31 executing program 2: getgroups(0x400000000000023e, &(0x7f00000012c0)) 18:10:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14}, 0x14}}, 0x0) 18:10:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x123}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000280)=""/212, &(0x7f0000000040)=0xd4) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000740)=""/217) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x1}}, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1619.133961][ C0] net_ratelimit: 14 callbacks suppressed [ 1619.133985][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1619.146166][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000400000061102800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 18:10:31 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x6b, 0xd3, 0x23, 0x10, 0x1d50, 0x60a1, 0x6a31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe9, 0xdd, 0xb0}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}) 18:10:31 executing program 2: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) 18:10:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getnetconf={0x14}, 0x14}}, 0x0) 18:10:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) 18:10:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001300)={r3, 0x3, 0x6, @dev}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) 18:10:31 executing program 1: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x30) [ 1619.601614][T17627] device syz_tun entered promiscuous mode [ 1619.621400][T17627] device syz_tun left promiscuous mode 18:10:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:10:31 executing program 1: faccessat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:10:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') readv(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 18:10:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1619.923602][T11832] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1619.933728][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1619.939918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1619.946830][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1619.953019][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() getpgid(r1) 18:10:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x0, 0x0, 0x0) [ 1620.174033][T11832] usb 5-1: Using ep0 maxpacket: 16 [ 1620.264118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1620.270672][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1620.277313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1620.283736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1620.293762][T11832] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=6a.31 [ 1620.302933][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.326409][T11832] usb 5-1: config 0 descriptor?? [ 1620.803787][T11832] airspy 5-1:0.0: Board ID: 00 [ 1620.808682][T11832] airspy 5-1:0.0: Firmware version: [ 1621.033769][T11832] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 1621.043020][T11832] airspy 5-1:0.0: Registered as swradio16 [ 1621.049115][T11832] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1621.062034][T11832] usb 5-1: USB disconnect, device number 53 [ 1621.783608][T11832] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1622.043484][T11832] usb 5-1: Using ep0 maxpacket: 16 [ 1622.163654][T11832] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=6a.31 [ 1622.173505][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.182925][T11832] usb 5-1: config 0 descriptor?? 18:10:34 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x6b, 0xd3, 0x23, 0x10, 0x1d50, 0x60a1, 0x6a31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe9, 0xdd, 0xb0}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}) 18:10:34 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 18:10:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:34 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') readv(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) 18:10:34 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'\x92\xf9~', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x6) 18:10:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1622.486966][T11832] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 1622.495449][T11832] airspy 5-1:0.0: Could not detect board [ 1622.501298][T11832] airspy: probe of 5-1:0.0 failed with error -71 18:10:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x5}) [ 1622.580767][T11832] usb 5-1: USB disconnect, device number 54 18:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) lseek(r3, 0x0, 0x3) 18:10:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) [ 1623.003490][T11832] usb 5-1: new high-speed USB device number 55 using dummy_hcd 18:10:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {}, [{}, {}, {}, {}, {}, {0x2, 0x4}, {0x2, 0x4}]}, 0x5c, 0x0) 18:10:35 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 1623.255627][T11832] usb 5-1: Using ep0 maxpacket: 16 [ 1623.377519][T11832] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=6a.31 [ 1623.386902][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.419484][T11832] usb 5-1: config 0 descriptor?? [ 1623.903769][T11832] airspy 5-1:0.0: Board ID: 00 [ 1623.908891][T11832] airspy 5-1:0.0: Firmware version: [ 1624.113895][T11832] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 1624.122423][T11832] airspy 5-1:0.0: Registered as swradio16 [ 1624.128638][T11832] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1624.142590][T11832] usb 5-1: USB disconnect, device number 55 [ 1624.413626][ C1] net_ratelimit: 16 callbacks suppressed [ 1624.413640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1624.425753][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1624.431942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1624.438076][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:36 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/100, 0x64}, {0x0}], 0x4) 18:10:36 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee45101", @ANYRESDEC], 0x0, 0x51}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:36 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 18:10:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f0000000040)) 18:10:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff19, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xc, 0x2, @local}]}, 0x34}}, 0x0) 18:10:36 executing program 3: r0 = socket(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x400, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 18:10:36 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) accept$inet(r0, 0x0, 0x0) 18:10:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 18:10:37 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r0) 18:10:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x0, 0x1}) 18:10:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x233, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) 18:10:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x233, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) 18:10:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) socket$inet6(0xa, 0x400000000001, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="3467ffebff003500006fcd5df5be3eaacf3af7b13d007f122e040000008c15eeb889aeb1cd0600002414c68700e2009356df78a948b7d0e2fe11c097060035bd00000001e5cda371421c5bc70ffd4763d756655e5f5de2195d503b00bb4d5ff17b18e2fb08548e527045b18100001b8851e5bea15f20831917ae00b91f6467cd626750d190938e67b3fd73395f7d2817a7bd8a8c2e4cfe5abd277f1b2d4df99eb7460ebe98d9a9a7647204ba60e572912787e62c562a62314e689446b1a760089a299de7"], 0xc4) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r2 = socket$bt_rfcomm(0x1f, 0x2, 0x3) syz_genetlink_get_family_id$team(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000007c0)={@multicast2, @initdev}, &(0x7f0000000800)=0xc) getpid() getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r3, &(0x7f0000000300)='net/tcp\x00') r4 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00'}) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$inet(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x0, 0x3a) open(0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$fou(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0), 0x0) 18:10:37 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000680)=""/152) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) [ 1625.374072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1625.380388][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:37 executing program 0: socket$kcm(0x2, 0x0, 0x84) r0 = socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffef7a0af0fff8ffffff79a4f04ef2918b00b7060000ffffffff2d6405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x81}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x7fffffff, 0x800}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0x11, 0x8000000000000003, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="836a2a619db3eb63a17f9823280d46343af2881ca70219084128d8c776851a034dbda423eec869a174b5159287e45053684a297004f5ad009797f49fd9c73ff72052209ae9ec8f1ba79b55900db408b51e80c7dffc2ba23cf4e7293c923021fce6325651eec9e0f06fd3efda06ab581bbe01772ee76e13eee1305fa073a6912f93ca336a21617df10a6a1eb96c4c38c92894fb783561cbf78ca66dff0aae96accb1b777d1c0ae78e09bc916e2c17421847b06664535114f79e327029ce6696e6179e6c4e8c41366aeda17703b0e03e86ec1fbf38b97f3a19ac0902ee6bc952"], 0xfdef) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/61}, 0x20) 18:10:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:37 executing program 1: bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 18:10:37 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 18:10:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:38 executing program 4: 18:10:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) [ 1626.174115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1626.180510][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1626.187322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1626.193754][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:38 executing program 2: 18:10:38 executing program 3: 18:10:38 executing program 0: 18:10:38 executing program 1: 18:10:38 executing program 4: 18:10:38 executing program 4: 18:10:38 executing program 1: 18:10:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:38 executing program 0: 18:10:38 executing program 3: 18:10:38 executing program 2: 18:10:38 executing program 0: 18:10:38 executing program 1: 18:10:38 executing program 4: 18:10:38 executing program 3: 18:10:38 executing program 2: 18:10:38 executing program 0: 18:10:38 executing program 1: 18:10:38 executing program 2: 18:10:38 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:38 executing program 4: 18:10:38 executing program 3: 18:10:38 executing program 0: 18:10:39 executing program 1: 18:10:39 executing program 2: 18:10:39 executing program 0: 18:10:39 executing program 3: 18:10:39 executing program 4: 18:10:39 executing program 1: 18:10:39 executing program 3: 18:10:39 executing program 2: 18:10:39 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:39 executing program 0: 18:10:39 executing program 1: 18:10:39 executing program 4: 18:10:39 executing program 3: 18:10:39 executing program 0: 18:10:39 executing program 2: 18:10:39 executing program 1: 18:10:39 executing program 4: 18:10:39 executing program 3: 18:10:39 executing program 2: 18:10:39 executing program 4: 18:10:39 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:39 executing program 0: 18:10:39 executing program 1: 18:10:39 executing program 4: 18:10:39 executing program 3: 18:10:39 executing program 2: 18:10:39 executing program 0: 18:10:40 executing program 1: 18:10:40 executing program 2: 18:10:40 executing program 3: 18:10:40 executing program 4: 18:10:40 executing program 1: 18:10:40 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:40 executing program 0: 18:10:40 executing program 3: 18:10:40 executing program 2: 18:10:40 executing program 4: 18:10:40 executing program 1: 18:10:40 executing program 3: 18:10:40 executing program 2: 18:10:40 executing program 4: 18:10:40 executing program 0: 18:10:40 executing program 1: 18:10:40 executing program 2: 18:10:40 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:40 executing program 3: 18:10:40 executing program 0: 18:10:40 executing program 4: 18:10:40 executing program 1: 18:10:40 executing program 2: 18:10:40 executing program 3: 18:10:40 executing program 4: 18:10:40 executing program 1: 18:10:40 executing program 0: 18:10:40 executing program 2: 18:10:41 executing program 1: 18:10:41 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:41 executing program 3: 18:10:41 executing program 2: 18:10:41 executing program 4: 18:10:41 executing program 0: 18:10:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942ce72590f1bf41d20d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x5) 18:10:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821", 0x4a}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 18:10:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000400)) 18:10:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001d0003000000", 0x24) 18:10:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) [ 1629.460455][T20220] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 18:10:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x80) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) wait4(0x0, 0x0, 0x1, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000008c97659a56525a4d65ae95dc03372d0000000001000000000000000141000000"]}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c58163d042fbe907c", @ANYRES16=r1, @ANYBLOB="000429bd700000000000010000000000000008410000001400180000001269623a6970365f7674693000"], 0x3}, 0x1, 0x0, 0x0, 0x840}, 0x60) 18:10:41 executing program 3: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='0'], 0x1) lseek(r2, 0x0, 0x3) fcntl$dupfd(r1, 0x406, r2) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 18:10:41 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) [ 1629.533828][ C0] net_ratelimit: 14 callbacks suppressed [ 1629.533851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1629.546297][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1629.627264][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.637155][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:10:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) [ 1629.673876][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.701124][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.741736][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.759170][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:10:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d1438733ca9997fb677a0b480f808e1251c0fbac0790ad0cf944599b4b23297e30e613b957bbd0449255697029ec9408003da0c2aca5285838440c370fa8bb7a79b52fe624a56c320517df4ccc52f4b85d0789bba846e", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1629.793066][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.823156][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1629.871860][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.917540][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:10:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 18:10:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) 18:10:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:42 executing program 0: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a00) 18:10:42 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fd) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) 18:10:42 executing program 0: r0 = creat(&(0x7f0000000340)='./file1\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)) 18:10:42 executing program 2: r0 = socket$inet6(0xa, 0x2000000080803, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 18:10:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) [ 1630.333924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1630.340228][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1630.346922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1630.353381][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507}, 0x24}}, 0x0) 18:10:42 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ftruncate(r0, 0x8200) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:10:42 executing program 3: mknod(0x0, 0x242456d113644c73, 0x0) 18:10:42 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:10:42 executing program 3: setrlimit(0x7, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) [ 1630.653848][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1630.660144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1630.666807][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1630.673089][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) 18:10:42 executing program 0: io_setup(0x0, &(0x7f0000000000)) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x8}, 0x0, 0x400b, 0x448e370e0511d35e}}, 0x2fe40}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 18:10:43 executing program 4: fsync(0xffffffffffffffff) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x577}], 0x2000000000000287) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={0x0, 0x0}}, &(0x7f000004cffc)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x7}}, 0x0) 18:10:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, &(0x7f0000003000/0x1000)=nil, 0x1}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) 18:10:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/11, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r2, r0) ioctl$BLKIOMIN(r1, 0x1278, 0x0) 18:10:43 executing program 1: 18:10:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa6704b039a34a0800450000680000000000069078000000000000000000004e20", @ANYRES32=0x42424242, @ANYRES32=0x41424344, @ANYBLOB="505b0800546a6a401eecef03723467d013db"], 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad27", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="ff5b5922af2748bc68df"], 0xa) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 18:10:43 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000000), 0x0) 18:10:43 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:10:43 executing program 2: 18:10:43 executing program 4: 18:10:43 executing program 1: 18:10:44 executing program 1: 18:10:44 executing program 4: 18:10:44 executing program 2: 18:10:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:44 executing program 2: 18:10:44 executing program 4: 18:10:44 executing program 3: 18:10:44 executing program 1: 18:10:44 executing program 2: 18:10:44 executing program 0: 18:10:44 executing program 4: 18:10:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:44 executing program 4: 18:10:44 executing program 0: 18:10:44 executing program 2: 18:10:45 executing program 3: 18:10:45 executing program 1: 18:10:45 executing program 0: 18:10:45 executing program 3: 18:10:45 executing program 4: 18:10:45 executing program 2: 18:10:45 executing program 1: 18:10:45 executing program 0: 18:10:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x25000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:45 executing program 3: 18:10:45 executing program 4: 18:10:45 executing program 2: 18:10:45 executing program 1: 18:10:45 executing program 0: 18:10:45 executing program 3: 18:10:45 executing program 4: 18:10:45 executing program 2: 18:10:45 executing program 1: 18:10:45 executing program 0: 18:10:45 executing program 3: 18:10:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:45 executing program 0: 18:10:45 executing program 2: 18:10:45 executing program 4: 18:10:45 executing program 1: 18:10:45 executing program 3: 18:10:46 executing program 0: 18:10:46 executing program 2: 18:10:46 executing program 1: 18:10:46 executing program 4: 18:10:46 executing program 3: 18:10:46 executing program 0: 18:10:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:46 executing program 2: 18:10:46 executing program 1: 18:10:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00', 0x0) dup2(r1, r0) 18:10:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 18:10:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:10:46 executing program 1: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000040)) 18:10:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xf8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000ac00", @ANYRES16, @ANYBLOB="0000fcffffff0000000010000000080004000000000024000100080009000000000008000600776c630008000b00736970000800020000000000200001000c0006006c626c630000000000000500010000000800050000000000"], 0x3c0}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:10:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) 18:10:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 18:10:46 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) sched_rr_get_interval(0x0, &(0x7f0000000000)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') readv(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) 18:10:46 executing program 3: syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:10:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000100)={@remote}, 0xc) [ 1634.813939][ C1] net_ratelimit: 16 callbacks suppressed [ 1634.813963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1634.826187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1634.832754][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1634.839163][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, 0x0, &(0x7f00000000c0), 0x0, 0x0) 18:10:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3102009ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:10:47 executing program 2: pipe(&(0x7f0000000200)) 18:10:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00\xebf\xba\n\xa1\xb6\x1d\x17\x8c\fP6\b\x8bS\x93\xbf\x15\x06\xa5\xe9Ef\xe0\x86\xbc\xf2\x82\x8e4\x91\xd9D\xc1\x8ed\xa4k\xf7\xc9\xaa\xd8#m\x05\xebY=X\xee!nV') pipe(&(0x7f0000000440)) clone(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="a0de925b34dcb7c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3009f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15bb4c70f5c4677f30ed8c8d8c7513f1209217d2ac1c60455a77c9545f12a29c882cc2fb5eef125c03e7137b74cca03b0b2c2c9e3f856f0cee") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x8, 0xfffffffff7fffffb, 0x4}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020003) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 18:10:47 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='w', 0x1, 0xfffffffffffffffb) 18:10:47 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x40}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) fallocate(r0, 0x0, 0x0, 0x1000f4) 18:10:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, 0x0, 0x0, 0x0, 0x0) 18:10:47 executing program 4: creat(&(0x7f0000000040)='./bus\x00', 0x0) utime(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)) 18:10:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 18:10:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000130000005c000000000000009500000000000000bb977d41d8f7f3ce9a57e59787e3004cfa0382d0600b341992a6af07a1c316a21f11d476668b5d3f49daefee6b7657365a896bc207fc07e8f7513e7b2616be0c9f9e863f44b6a800c311e9bb87dce90d732b5467dd06c0d7529af3b02dee536386df2793fa7e0726080ab6e800f9e1fc32dbbb9f08aae4dc539920d46d7e14a88f6d761a491ad78baa9e2337355fde81"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1, 0x0, &(0x7f0000000140)="516f0d83e208b039f2e6a6ae88a8", 0x0, 0xc60, 0x0, 0xfffffffffffffdc0, 0x0, &(0x7f0000000300)="459a7b2086559008b2ff9d25", &(0x7f0000000180)="7c79e4c76a03db75db7a5b7187d1a0ae5f5cbe3722071b950900a1f3d97dd9e58e68e24ced5d5ae66151ec8f807a27add5f11e"}, 0x28) [ 1635.773932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1635.780356][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:47 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.selinux\x00', 0x0, 0x0, 0x4eeccaffab3fc671) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x50, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x8004}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084502, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) 18:10:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007166710048000200"/92], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x3c, 0x28, 0x701, 0x0, 0x0, {0x0, r3}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 18:10:48 executing program 4: semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) tkill(0x0, 0x0) timer_create(0x0, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xfffffffffffffe2e) tkill(r1, 0x1000000000016) 18:10:48 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x0) symlink(0x0, &(0x7f0000000280)='./file1\x00') r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:10:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) 18:10:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0900000000003639408fa3a3ba37b59adf78656251660199783b0a82f79b", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 18:10:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d143873", 0x97}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:48 executing program 3: syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) 18:10:48 executing program 4: syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b", 0x12) open(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:10:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)="80", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:10:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x25000, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x8}, 0x0, 0x400b, 0x448e370e0511d35e}}, 0x2fe40}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 18:10:48 executing program 2: syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket(0x1000000010, 0x400000400080803, 0x0) write(r1, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r2, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) [ 1636.574139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.580557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1636.587403][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.593945][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ff5b5922af2748bc68dfab8d4c8941f94d8a4e9e2f"], 0x15) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 18:10:48 executing program 3: 18:10:49 executing program 4: 18:10:49 executing program 5: 18:10:49 executing program 3: 18:10:49 executing program 1: 18:10:49 executing program 2: 18:10:49 executing program 5: 18:10:49 executing program 2: 18:10:49 executing program 4: 18:10:49 executing program 1: 18:10:49 executing program 3: 18:10:49 executing program 0: 18:10:49 executing program 2: 18:10:49 executing program 1: 18:10:49 executing program 4: 18:10:49 executing program 5: 18:10:49 executing program 3: 18:10:49 executing program 5: 18:10:49 executing program 4: 18:10:49 executing program 2: 18:10:49 executing program 1: 18:10:49 executing program 3: 18:10:49 executing program 0: 18:10:49 executing program 4: 18:10:49 executing program 5: 18:10:49 executing program 1: 18:10:50 executing program 2: 18:10:50 executing program 4: 18:10:50 executing program 0: 18:10:50 executing program 3: 18:10:50 executing program 5: 18:10:50 executing program 1: 18:10:50 executing program 2: 18:10:50 executing program 4: 18:10:50 executing program 0: 18:10:50 executing program 3: 18:10:50 executing program 5: 18:10:50 executing program 1: 18:10:50 executing program 2: 18:10:50 executing program 0: 18:10:50 executing program 4: 18:10:50 executing program 3: 18:10:50 executing program 1: 18:10:50 executing program 2: 18:10:50 executing program 5: 18:10:50 executing program 0: 18:10:50 executing program 4: 18:10:50 executing program 2: 18:10:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xf8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100"/521], 0x209) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:10:50 executing program 1: 18:10:50 executing program 5: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x1c08) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x30) 18:10:50 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:10:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, &(0x7f0000003000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) io_setup(0x5, &(0x7f0000000100)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:51 executing program 1: r0 = creat(&(0x7f0000000340)='./file1\x00', 0x0) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9) sync_file_range(r0, 0x0, 0x0, 0x2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1, [{}]}) 18:10:51 executing program 5: setuid(0xee01) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 18:10:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000280008001c0001000400000000000000cd65ddc6e5be8075000000000200005cefa72e2625feeae6"], 0x4c}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) [ 1639.009438][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 1639.121652][T24197] kvm_set_msr_common: 3 callbacks suppressed [ 1639.121692][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:51 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x143042, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x5cc24425981a0abe) r1 = dup(r0) ioctl(r1, 0x0, 0x0) creat(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) tkill(r2, 0x1000000000016) [ 1639.220103][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 18:10:51 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x111}}}}}}}, 0x0) 18:10:51 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x208200) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7}, 0x7) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 1639.321435][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x275, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000008500000000000000851000000000000085100000000000009500000000000000"], &(0x7f0000000140)='G\x00', 0x5, 0xfe0d, &(0x7f000000cf3d)=""/170, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd8, 0x10, &(0x7f0000000000), 0xffffffffffffffcb}, 0x48) 18:10:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr="bd7212ccb18f7fd5b1100d7a08e5f835"}, 0x14) [ 1639.471389][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1639.500571][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1639.536928][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:51 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000340)={0xff, 0xff69}) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "bf2f99daf68f19af", "c34adc85bd8ced63992840ba069dda1d", "bfeaf537", "78f6170986b4a3ca"}, 0x28) ptrace(0x4207, r3) ptrace$cont(0x8, r3, 0x0, 0xaed) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1f, 0x1, 0xff, 0x80, 0x0, 0x0, 0x32200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x1}, 0x10, 0x1, 0x6c5, 0x2, 0x3, 0x0, 0xb8c}, r3, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xc4b36b2e421cc482, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x109800, 0x0) 18:10:51 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "bf2f99daf68f19af", "c34adc85bd8ced63992840ba069dda1d", "bfeaf537", "78f6170986b4a3ca"}, 0x28) ptrace(0x4207, r3) ptrace$cont(0x8, r3, 0x0, 0xaed) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1f, 0x1, 0xff, 0x80, 0x0, 0x0, 0x32200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x1}, 0x10, 0x1, 0x6c5, 0x2, 0x3, 0x0, 0xb8c}, r3, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xc4b36b2e421cc482, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1639.661544][T24197] kvm [24194]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 [ 1639.744753][T24881] ptrace attach of "/root/syz-executor.1"[11816] was attempted by "/root/syz-executor.1"[24881] [ 1639.775961][T24916] ptrace attach of "/root/syz-executor.5"[12421] was attempted by "/root/syz-executor.5"[24916] [ 1639.934076][ C0] net_ratelimit: 14 callbacks suppressed [ 1639.934097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1639.946475][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:52 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:10:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001940)="a5b74325f4900180add55fa056c0604f681902218d2caea28c46112d59161fb7ad49a51f0e8e35bccd828c5ae2581cb68c97dd8861a8999cd733184c7c8ca9138ad4fd6b344e4ac18311b2051e3e70f48aa3f23a8243fc591c1683267408124e52cd3b78e71aea4d8e0a4143b727fb72caae99ab144482fce2ee516df04b5ad133fba6ed4b8bd344784168814e2dfbd245884315ae6d3ab3917fd63fc40df0844246c026d6934c6e0c0ea9eca6daa6446161e7af3a2e9d09cb2213e94fd8a226135878c300f448f2dd6b993ea176991bd5d440778cb9ccf3374d083b25c850cb10b01e4129d08b0712d7f256fe59b8f2cbf9c4ab68399f54acfc3ed77cbf8515de4005b001c2668e640383024ed15efb96fb1aee9dc6235063675965f9ecbeae71aa3f3e57da268377346e837e1d0dcab542b4fb6c78d0a595eecb44631ced969fee68618612e1af92cb26e9d51eab136c83e87ce8c103180cf30d45c48b01f7b8c7e50d5ac1030de8253945daa80a173b9e276299b528035ba65aa6c17fea0ac6a9bb4ed5f9b19a2d0274d22916893b544002b94e1d8e679d0f87a4a7133536de6a909c21bb5dbe1d7b306b83d241ac6bf0fd363f17109505ec6c7ddc0d909f18c48f2f0dfcd35255d9ba3a00c231af5dc0dacf570f383a26a2e2e9adb4441f1adfe82ebd1ce0a967c255c6d103ca6fa160ce30e7c6d540fa333c6dec5e958a826def0a719246b64f", 0x209}], 0x281, 0x0, 0x0, 0x3a98}}], 0x1, 0x0) 18:10:52 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) dup2(r1, r0) 18:10:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 18:10:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000130000005c000000000000009500000000000000bb977d41d8f7f3ce9a57e59787e3004cfa0382d0600b341992a6af07a1c316a21f11d476668b5d3f49daefee6b7657365a896bc207fc07e8f7513e7b2616be0c9f9e863f44b6a800c311e9bb87dce90d732b5467dd06c0d7529af3b02dee536386df2793fa7e0726080ab6e800f9e1fc32dbbb9f08aae4dc539920d46d7e14a88f6d761a491ad78baa9e2337355fde81"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 18:10:52 executing program 1: creat(0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) socket$inet6(0xa, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) mknod$loop(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 18:10:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:10:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020003) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r5, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r2, 0x4, 0x44800) io_submit(r3, 0x4100, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) 18:10:52 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 18:10:52 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020003) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x4100, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 18:10:52 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) [ 1640.734031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1640.740500][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1640.747286][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1640.753759][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:53 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x1d3, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) 18:10:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x3, 0x0, 0x8020003) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) 18:10:53 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) 18:10:53 executing program 1: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) socket$inet6(0xa, 0x0, 0x0) socket(0x0, 0x0, 0x0) 18:10:53 executing program 2: r0 = socket$inet6(0xa, 0x803, 0xa5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4}}, 0xe8) 18:10:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) [ 1641.053903][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1641.060295][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1641.067055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1641.073620][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:53 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020003) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x4100, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 18:10:53 executing program 4: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_pts(r2, 0x0) getpriority(0x1, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xf000}, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) write$evdev(r6, &(0x7f00000003c0)=[{{r7}, 0x0, 0x0, 0x50bc}, {{0x0, 0x7530}, 0x11, 0x6, 0xb80}, {{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x0, 0x9}], 0x78) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x10001) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:10:53 executing program 0: 18:10:53 executing program 1: 18:10:53 executing program 5: 18:10:53 executing program 3: 18:10:53 executing program 0: 18:10:53 executing program 1: 18:10:53 executing program 5: 18:10:53 executing program 3: 18:10:53 executing program 4: 18:10:53 executing program 0: 18:10:54 executing program 2: 18:10:54 executing program 1: 18:10:54 executing program 3: 18:10:54 executing program 0: 18:10:54 executing program 5: 18:10:54 executing program 4: 18:10:54 executing program 5: 18:10:54 executing program 2: 18:10:54 executing program 1: 18:10:54 executing program 3: 18:10:54 executing program 0: 18:10:54 executing program 5: 18:10:54 executing program 4: 18:10:54 executing program 2: 18:10:54 executing program 3: 18:10:54 executing program 1: 18:10:54 executing program 5: 18:10:54 executing program 0: 18:10:54 executing program 2: 18:10:54 executing program 4: 18:10:54 executing program 1: 18:10:54 executing program 3: 18:10:54 executing program 5: 18:10:54 executing program 0: 18:10:54 executing program 2: 18:10:54 executing program 4: 18:10:54 executing program 1: 18:10:55 executing program 5: 18:10:55 executing program 0: 18:10:55 executing program 2: 18:10:55 executing program 3: 18:10:55 executing program 1: 18:10:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2c2c15f773728645840f6b546de7d0b2de8c3212c971103aaaef6a3b8b11b74181f1a4539bec72b8619f30bb0c60f1375652763f11a884d05f8be62a4f563f6552e04d49e7196a347c5c81c3f6e4b6cb4fed1eb9060a1f167ff05a3048b15c0d83dca7c7a9e550cbe408aad666925d38982250840b3287", @ANYRESHEX], 0x89) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x277) gettid() ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:10:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r0, &(0x7f0000000580)}, 0x20) fsync(r0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffcf2, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000500)={0xffff, {{0x2, 0x4e23, @multicast2}}}, 0x88) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x577}], 0x2000000000000287) r4 = dup(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r4, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xaa0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0xa92, 0x9}, &(0x7f0000000100)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x22, &(0x7f0000000300)='ppp0{)wlan1-proccpusetlomd5sumGPL\x00', r5}, 0x30) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000000380)="cee1ed7d1a9acf22ddd7d12d73ae7090c3a9c42539b638c25a9633a7edfb14000bb20cec91", &(0x7f00000003c0)="530d4d50d60a92d8ae590596f8f39752dea11ed8cb1c7e51d1151a1cf2a4849b97dafd7944446f69ceb538e0be47c76de27a08f20d8025c8c057ec01b0e43a8a56bf71159056889c69458cce83420d04872befa7a6261a842c6cd6575d0dc4d639a86d399441ae6c416f39d201f9d33f6ba56989e0a3cab0bde3a4e87279bcb805d8ede003c98ab8224b2e892bbb798a8fc871cd66699b4972df7c42bae2b46fba74e2c8069fec90d90038d186cd7dd8efa8e00343c83970b9dd25b1f6a5455fb88298f8b5f3bb72e80d0db78230c0b2a13ddebfd95d623247981b6866bfd610f979f3a7b97b10cc27b54c5f72bbe5"}}, &(0x7f000004cffc)) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x1}, 0x18) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev}, {0x2, 0x0, @multicast2}}) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6002290f00c382241e895ef1834b968d0f443d38083a0000000000000000000000000000000000000000000181009078000000000c600a0b1e3deb785dab5798c5cdb7006748034c3b07ca70451fa3d3"], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x7}}, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000039c0)=""/4096) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000280)={0x11, 0xf6, &(0x7f0000000180)="6cd38feb74f2e89a87308defce70f6737f8cdf14a755df80eed56ebe671420aa591f0b2002de7f0d158e910741c1c1c681e2b308b9731dcf6d63b1e52ddb759e4533afc53b97cf14e0baeb33e24f61642facb43ee20ddc2bee02d51df7e4d2f4b01f3c37782e260bf47c12603000cced2ec8d95c5d9efcb50f62e0059526d9e43c58ab8679573330ad0b199e6dd400f187baef4fe9d3c387e48ebd7184491a22066927c9c06b8f3a79ff5765fa970554adbddd1d97a9f5ec043ee97c4df49af232df7b892a1487d3ae8ebecad5da91b6364c3fa51600ebc9c47694ba6961a9dee077ee23a82483f50e29e9dc51d2ac401d5e77667314"}) 18:10:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x1}], 0x1}}], 0x4000000000001cc, 0x4000000) 18:10:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0xfffffe69, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:10:55 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2060000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') setns(r1, 0x0) clone(0x400000070024103, 0x0, 0x0, 0x0, 0x0) 18:10:55 executing program 1: [ 1643.383739][T26646] IPVS: ftp: loaded support on port[0] = 21 [ 1643.425773][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1643.433732][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1643.486525][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1643.507951][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vti0: link becomes ready [ 1643.515755][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vti0: link becomes ready [ 1643.527882][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vti1: link becomes ready [ 1643.535632][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vti1: link becomes ready [ 1643.544900][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vti2: link becomes ready [ 1643.552639][T26672] IPv6: ADDRCONF(NETDEV_CHANGE): vti2: link becomes ready 18:10:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xf8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100"/521], 0x209) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000ac00", @ANYRES16, @ANYBLOB="0000fcffffff0000000010000000080004000000000024000100080009000000000008000600776c630008000b00736970000800020000000000200001000c0006006c626c630000000000000500010000000800050000000000"], 0x3c0}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1643.647426][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1643.655387][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1643.663126][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1643.672282][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1643.681462][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1643.690546][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1643.699529][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1643.708683][T11832] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready 18:10:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffefffffffffff, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000380)=""/239, 0xef}], 0x1, 0x0) 18:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffefffffffffff, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000380)=""/239, 0xef}], 0x1, 0x0) 18:10:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flistxattr(r0, 0x0, 0x0) 18:10:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4188aea7, &(0x7f0000000140)) 18:10:56 executing program 4: syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:10:56 executing program 1: r0 = open(0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000340)) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@abs, 0x6e) creat(&(0x7f0000000300)='./file0\x00', 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 18:10:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x18}}], 0x18}, 0x0) 18:10:56 executing program 3: open(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@abs, 0x6e) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) openat$null(0xffffffffffffff9c, 0x0, 0x109800, 0x0) 18:10:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000148000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000d0003000000"], 0x30}}, 0x0) 18:10:56 executing program 1: mknod$loop(0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x3d4, &(0x7f0000000340), 0x37f, 0x0, 0xfffffffffffffd57}, 0x0) 18:10:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x3d4, &(0x7f0000000340), 0x37f, 0x0, 0xfffffffffffffd57}, 0x0) 18:10:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x3d4, &(0x7f0000000340), 0x37f, 0x0, 0xfffffffffffffd57}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x3d4, &(0x7f0000000340), 0x37f, 0x0, 0xfffffffffffffd57}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 18:10:56 executing program 4: r0 = gettid() unshare(0x28020400) exit(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') 18:10:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) 18:10:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f90", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\b\xc0\xbf4\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1644.989566][T27809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:10:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) [ 1645.114217][T27809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1645.134986][T27809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1645.149586][T28038] net_ratelimit: 24 callbacks suppressed [ 1645.149619][T28038] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 18:10:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2000000080803, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1645.213976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1645.220338][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1645.226995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1645.233421][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1645.414375][T27809] IPv6: ADDRCONF(NETDEV_CHANGE): vti0: link becomes ready [ 1645.435085][T27809] IPv6: ADDRCONF(NETDEV_CHANGE): vti1: link becomes ready 18:10:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xf8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000ac00", @ANYRES16, @ANYBLOB="0000fcffffff0000000010000000080004000000000024000100080009000000000008000600776c630008000b00736970000800020000000000200001000c0006006c626c630000000000000500010000000800050000000000"], 0x3c0}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1645.461096][T27809] IPv6: ADDRCONF(NETDEV_CHANGE): vti2: link becomes ready 18:10:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000640)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00000012c0)="03", 0x1, 0x9, 0x0, 0x0) 18:10:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 18:10:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000148000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000d0003000000"], 0x30}}, 0x0) 18:10:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = inotify_init() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x3a8, 0x2, 0x0, 0x27) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x800, 0x80000, 0x1000, 0x200000000}) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r0, r2) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1646.011239][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1646.014490][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1646.024341][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1646.024666][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1646.032126][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, &(0x7f0000003000/0x1000)=nil, 0x1}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1646.071505][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): vti0: link becomes ready [ 1646.080930][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): vti1: link becomes ready [ 1646.088923][T28824] IPv6: ADDRCONF(NETDEV_CHANGE): vti2: link becomes ready 18:10:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, &(0x7f0000003000/0x1000)=nil, 0x1}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:58 executing program 4: setregid(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) [ 1646.174819][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1646.181444][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000300), 0x103, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) [ 1646.408081][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 1646.475171][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1646.541258][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 18:10:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@local, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0x248) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000880)="3ced01712ebbbbb101f33c4ca2403832096d9ae11ceb2e42972c9b06e8a891d536cc267d1fc23e84a952f0eb9a6f940f75c4c42924d310fcecb6ff62d3525f4d", 0x40}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1646.587452][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1646.698641][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 18:10:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x81}]}}]}, 0x4c}}, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x42, 0x0) 18:10:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1646.816330][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 1646.880414][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 18:10:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, &(0x7f0000003000/0x1000)=nil, 0x1}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1646.931469][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 [ 1646.973936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1646.991887][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1647.019510][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 [ 1647.042159][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1647.106262][T28859] kvm [28856]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 18:10:59 executing program 1: 18:10:59 executing program 5: 18:10:59 executing program 3: 18:10:59 executing program 5: 18:10:59 executing program 2: 18:10:59 executing program 0: 18:10:59 executing program 4: 18:10:59 executing program 1: 18:10:59 executing program 3: 18:10:59 executing program 5: 18:10:59 executing program 2: 18:10:59 executing program 2: 18:10:59 executing program 3: setrlimit(0x7, &(0x7f0000000000)) open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 18:10:59 executing program 5: 18:10:59 executing program 1: 18:10:59 executing program 4: 18:10:59 executing program 0: 18:11:00 executing program 1: 18:11:00 executing program 2: 18:11:00 executing program 5: 18:11:00 executing program 3: 18:11:00 executing program 4: 18:11:00 executing program 0: 18:11:00 executing program 2: 18:11:00 executing program 5: 18:11:00 executing program 1: 18:11:00 executing program 3: 18:11:00 executing program 4: 18:11:00 executing program 0: 18:11:00 executing program 5: 18:11:00 executing program 1: 18:11:00 executing program 3: 18:11:00 executing program 4: 18:11:00 executing program 2: 18:11:00 executing program 0: 18:11:00 executing program 5: 18:11:00 executing program 1: 18:11:00 executing program 3: 18:11:00 executing program 0: 18:11:00 executing program 5: 18:11:00 executing program 4: 18:11:00 executing program 2: 18:11:00 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 18:11:00 executing program 3: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x35}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 18:11:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x12b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) 18:11:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) dup3(r0, r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000080)={0x8, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x108) write(r4, &(0x7f0000000000)="b5", 0x1) sendfile(r3, r4, 0x0, 0x2000005) 18:11:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x130}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) 18:11:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 18:11:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [], {}, [{}, {}, {}], {}, {0x20, 0x4}}, 0x3c, 0x0) 18:11:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000080803, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 18:11:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) 18:11:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000200007fcab90e00eb590005000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 18:11:01 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:01 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getpid() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x40002) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 18:11:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) dup3(r0, r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000080)={0x8, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x108) write(r4, &(0x7f0000000000)="b5", 0x1) sendfile(r3, r4, 0x0, 0x2000005) 18:11:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, r1}, 0xc) getgroups(0x0, &(0x7f00000003c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1650.174029][ C0] net_ratelimit: 19 callbacks suppressed [ 1650.174052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1650.186352][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:02 executing program 4: semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) tkill(0x0, 0x0) timer_create(0x0, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x1000000000016) [ 1650.334121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1650.340406][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x8, 0x2}) 18:11:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) dup3(r0, r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000080)={0x8, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x108) write(r4, &(0x7f0000000000)="b5", 0x1) sendfile(r3, r4, 0x0, 0x2000005) 18:11:02 executing program 0: ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 18:11:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d8385fff33477", 0x8) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000500)={0x4, 0x0, [{0xc0000000, 0x8000, 0xfffffffd}, {}, {}, {}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:02 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0x0, 0x4000, 0x0, 0x0) getpid() 18:11:03 executing program 4: r0 = getpgrp(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)='A', 0x1}], 0x4}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000140)=""/107) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) tkill(0x0, 0x3f) ptrace$cont(0x18, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/216, 0xd8) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000400), 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4c5) 18:11:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b500000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x200006, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0900000000003639408fa3a3ba37b59adf78656251660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759", 0x30}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1651.133996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.140831][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1651.147524][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.153916][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) dup3(r0, r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000080)={0x8, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x108) write(r4, &(0x7f0000000000)="b5", 0x1) sendfile(r3, r4, 0x0, 0x2000005) 18:11:03 executing program 5: mknod(&(0x7f0000000080)='./file0\x00', 0x8100000000001040, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) gettid() creat(0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) unlink(0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) connect$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e20, @local}, 0x10) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000010c0)=0x19ff, 0x4) sendto$inet(r0, &(0x7f0000000140)="b0", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x3, 0x2000, 0x0) 18:11:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/245, 0xf5) lseek(r2, 0xfffffffffffffffc, 0x1) [ 1651.464128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1651.470435][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) 18:11:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) 18:11:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x12b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:03 executing program 2: 18:11:04 executing program 3: 18:11:04 executing program 1: 18:11:04 executing program 5: 18:11:04 executing program 0: socket(0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = inotify_init() ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup(r0) 18:11:04 executing program 3: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-{\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) mknod$loop(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) pipe(0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) creat(0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:11:04 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x18) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 18:11:04 executing program 4: [ 1652.601339][T31301] devpts: called with bogus options 18:11:04 executing program 4: 18:11:04 executing program 5: 18:11:04 executing program 1: 18:11:04 executing program 2: 18:11:04 executing program 4: 18:11:05 executing program 2: 18:11:05 executing program 1: 18:11:05 executing program 5: 18:11:05 executing program 0: 18:11:05 executing program 3: 18:11:05 executing program 4: 18:11:05 executing program 1: 18:11:05 executing program 2: 18:11:05 executing program 5: 18:11:05 executing program 0: 18:11:05 executing program 4: 18:11:05 executing program 3: 18:11:05 executing program 2: 18:11:05 executing program 1: 18:11:05 executing program 4: 18:11:05 executing program 0: 18:11:05 executing program 5: 18:11:05 executing program 3: 18:11:05 executing program 2: 18:11:05 executing program 1: 18:11:05 executing program 4: 18:11:05 executing program 3: 18:11:05 executing program 5: 18:11:05 executing program 0: 18:11:05 executing program 2: 18:11:05 executing program 1: 18:11:05 executing program 5: 18:11:05 executing program 3: 18:11:05 executing program 4: 18:11:06 executing program 1: 18:11:06 executing program 0: 18:11:06 executing program 2: 18:11:06 executing program 3: 18:11:06 executing program 1: 18:11:06 executing program 5: 18:11:06 executing program 4: 18:11:06 executing program 0: 18:11:06 executing program 3: 18:11:06 executing program 2: 18:11:06 executing program 5: 18:11:06 executing program 0: 18:11:06 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) prlimit64(0x0, 0x0, 0x0, 0x0) open(0x0, 0x100, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0xffffff37, 0x2000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0xffffffff, 0x2ed) fcntl$setpipe(r0, 0x407, 0x0) write(r1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r4 = socket(0x0, 0x0, 0x0) r5 = dup(r4) write$cgroup_int(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket(0x1000000010, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x80800, 0x0) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:11:06 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc\b\x00\x00\x00\x10\x98\xe6\xbb\x19\xd8\xa7w\xfa\xc1o\x11\xd0\x1a\x94\xd9xg\xe6/\x85t\x88t\xc3\xf4\xcc\v9\xde\x04\xf2\xf9\xc2\xfc\x18\xe7\x15\x18\x94\a$V\x1cw\xacD\xe5\x99&j;k\xd9\x19ud\xcf\x00Px\x04A\xdf!*\xe1H\x90\x97\x80.\xad\x05=\xa2\xe0\x91\x9e\x82\xcdVm\x0e\x93\\g\xfcn9\x1a\xc2\x13\x98\xf0\x8e\x14\xa0\xee\x7f\x16\x81\xdd\xd5\x19\x1d\x9f\xe33J\x8a*\xf2\xa4\xd39C\xf7\xf3_\xe7\xa5\xebS\xc3\x12\xab?\xcaU\xda1N\'\xb7\x83\xa4\xa7\x9b-\x9ds\xd1I\'8]\xac\x8c\x7f\xff\x1f)km\xe0\xbfU\xd5\xc2\x01x\xe6\xd5\x88N\xa8w\xb4\x9e\x16\xd2\xf59\xe3\xf0\x9f#\x98\xba\xcb\x97\xa4\xf1\x93\x01\xb9\xcaE\xd15\xb5\xb8\xece\x18\xa7mK#\xd8}\xb3+\t\x80\x86\x19\xad\xaa\x99^\xe7\xc2\xec\x85o\xbd\x85wg\xc8b\"\xbd\xcf\xa7+\xb3\x1f\xf4Sl\x8a\x8avp\x1e\x87/\xc8\xcf\xf8\x83/PM\f\xed#M#a_f\x9f', 0x2, 0x0) 18:11:06 executing program 3: r0 = getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 18:11:06 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:11:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc\b\x00\x00\x00\x10\x98\xe6\xbb\x19\xd8\xa7w\xfa\xc1o\x11\xd0\x1a\x94\xd9xg\xe6/\x85t\x88t\xc3\xf4\xcc\v9\xde\x04\xf2\xf9\xc2\xfc\x18\xe7\x15\x18\x94\a$V\x1cw\xacD\xe5\x99&j;k\xd9\x19ud\xcf\x00Px\x04A\xdf!*\xe1H\x90\x97\x80.\xad\x05=\xa2\xe0\x91\x9e\x82\xcdVm\x0e\x93\\g\xfcn9\x1a\xc2\x13\x98\xf0\x8e\x14\xa0\xee\x7f\x16\x81\xdd\xd5\x19\x1d\x9f\xe33J\x8a*\xf2\xa4\xd39C\xf7\xf3_\xe7\xa5\xebS\xc3\x12\xab?\xcaU\xda1N\'\xb7\x83\xa4\xa7\x9b-\x9ds\xd1I\'8]\xac\x8c\x7f\xff\x1f)km\xe0\xbfU\xd5\xc2\x01x\xe6\xd5\x88N\xa8w\xb4\x9e\x16\xd2\xf59\xe3\xf0\x9f#\x98\xba\xcb\x97\xa4\xf1\x93\x01\xb9\xcaE\xd15\xb5\xb8\xece\x18\xa7mK#\xd8}\xb3+\t\x80\x86\x19\xad\xaa\x99^\xe7\xc2\xec\x85o\xbd\x85wg\xc8b\"\xbd\xcf\xa7+\xb3\x1f\xf4Sl\x8a\x8avp\x1e\x87/\xc8\xcf\xf8\x83/PM\f\xed#M#a_f\x9f', 0x2, 0x0) 18:11:06 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000440)={0x0, 0x0, "51340217ad7a23cf09279bcbac9a192793172f981bf32dd0"}) 18:11:06 executing program 4: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/179) 18:11:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:11:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = getpid() get_robust_list(r1, &(0x7f0000000240)=0x0, &(0x7f0000000280)) [ 1654.661853][ T310] input: syz1 as /devices/virtual/input/input77 18:11:06 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9}) 18:11:06 executing program 4: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) 18:11:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getgroups(0x0, 0x0) 18:11:06 executing program 1: r0 = shmget(0x1, 0x3000, 0x201, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 18:11:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r5, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) 18:11:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) 18:11:07 executing program 1: wait4(0x0, 0x0, 0x81000001, 0x0) 18:11:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x13, &(0x7f0000001680)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000066843ea7f4967612afcbfbb5705d5c4cf26e62eea44e711443c25248ce30570640fbbf4a929fc12e15bf89353fa923"], 0x1) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x13, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x0, 0x1800}, 0x4) 18:11:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) read$FUSE(r2, 0x0, 0x0) write$FUSE_ENTRY(r3, &(0x7f0000000480)={0x90}, 0x90) 18:11:07 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000340)={0xff, 0xff69}) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "bf2f99daf68f19af", "c34adc85bd8ced63992840ba069dda1d", "bfeaf537", "78f6170986b4a3ca"}, 0x28) ptrace(0x4207, r3) ptrace$cont(0x8, r3, 0x0, 0xaed) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1f, 0x1, 0xff, 0x80, 0x0, 0x0, 0x32200, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x10, 0x1, 0x6c5, 0x2, 0x3, 0x0, 0xb8c}, r3, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xc4b36b2e421cc482, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x5) ioctl$RTC_EPOCH_SET(r4, 0x4004700e, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)) 18:11:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000108c0d22000000000000010902240001000000000904000009030000000921001c000122220009058103000000000057578866b5c39ace2dd71a16eed9b38e325061c0494befcbc6a3918b2ace9bda6cb8c13afd55fe43eb8f45be65d2cb9fa81d19142fdd510fa94a81b9f5f6d995a76b88eb9a3eb907a092be4bb933db648e666de6f611e051beb5cc991107719538eafb0c3696022aa1091ec209c7e5630ed9dbfcd3dfeb584ccb2ff44a1f56060ba3a0d1740d9dc728d26475ce3963e949b16363b00caa02bd7f4ac84148d9110e5ac4494e44d01e24f10166e9aaa42da7d2e417f82ff53b2f5f46d4bc05a252dddc8226196da6deec11ef1f54d9b49c78adc6f01997903bc36bff7a4f4761b51a75a98f03d6bc57bab5cf703c447625247c8c18e80fa560a08226f1741dec2d6230749e8d25e94626f630076a79ab5532b11ab9f61eb382c36a809ace115cf9e21e11ab7b2804c35fd2c4f18edabbc15cfefe6cfffc6a3599d79a0229c909d04f34693a270d0e91c2deb93e4bab3ab298be3283882fc9e7c0ca4e6eb5753d57bbabf83a594d1a67ff29455988b5a316ad95148555f7e9f385c3abe43e9efcac0a1f54ea7c242613a2d9ca76c39f20f921446923fef08f5bf9c7226239767717732d37d9fc11ae36ac00f917b89f1fecf9b8b73293f3f8eaabb5c8e368a4083b30f55a5c59709cf48ee0a7eac832e95b7f5127d1dfe9f1653b1349c8f71454f0bc810b6b63407f4af29d74b7798d5dea1a44e5821252d90d57135a868725d4ffadfef3888df9ee945960ff91a364b48eabfe2d80c0fb89ab67105ba62ca47f8ea0ddfc882373e67c8a782e3361d0327a7e7d45e89a18b27ef26870f36ee344d6a7a3656192e2e06fad09d2e27c07f465661929897dd819d912ccafac0c3716611a48"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x16c, {[@main=@item_4={0x3, 0x0, 0x0, "cf87f96f"}, @local=@item_4={0x3, 0x2, 0x0, "c4eb48fd"}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @local, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "af644c25"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x0, 0x2) r2 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000180)) write$hidraw(r1, &(0x7f0000000180)="b820", 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1655.293988][ C0] net_ratelimit: 18 callbacks suppressed [ 1655.294012][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.306251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1655.312886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.319844][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:07 executing program 4: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$getregset(0x420d, r0, 0x0, 0x0) 18:11:07 executing program 0: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000000)={0x0}) [ 1655.433482][ T931] ptrace attach of "/root/syz-executor.2"[11923] was attempted by "/root/syz-executor.2"[931] 18:11:07 executing program 2: syz_open_procfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() syz_open_procfs(r2, 0x0) 18:11:07 executing program 5: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$getregset(0x420b, r0, 0x0, 0x0) [ 1655.613962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.620246][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1655.626713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.632812][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942c", 0x4c}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 18:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942ce72590f1bf41d20d", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1655.713954][T11832] usb 2-1: new high-speed USB device number 40 using dummy_hcd 18:11:07 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 18:11:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b7457", 0x7d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:11:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [{}, {}, {}], {}, [{}, {}, {}], {0x10, 0x2}}, 0x54, 0x0) [ 1655.973672][T11832] usb 2-1: Using ep0 maxpacket: 16 18:11:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1656.098338][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1656.113933][T11832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.125437][T11832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1656.138558][T11832] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 18:11:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000080)) [ 1656.148137][T11832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.182517][T11832] usb 2-1: config 0 descriptor?? [ 1656.413944][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1656.420249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1656.667617][T11832] hid-generic 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 1656.675556][T11832] hid-generic 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 1656.685678][T11832] hid-generic 0003:0D8C:0022.0033: hidraw0: USB HID v1c.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 18:11:09 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) [ 1657.012096][T21992] usb 2-1: USB disconnect, device number 40 18:11:10 executing program 4: r0 = getpgrp(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000140)=""/107) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/216, 0xd8) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400), 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="0020000000000000c204000000f30502000404010004013fc2040000020000db97218c542038b5eacdbfe546dc934e9f856a1a9a600d042b824a5b58656db14ba9964a21d80c2a86c4ca0ef634c07b9a1281cecdd51b80f920b935d0f86d468a45e3d088b2e7c8aa9a991977c70c50f0bb2ac924e02cb6c5727000276e5bdab6cd61dd2abae42624562e9fa18fe7eeec83bc0046dff3728e0ffd015aa6f38dd1b92dac6e3d05de3312095649aeff15de3209839bc801fa110297b558eb35cbed6a4485a319f8c8bd20209b340620983fdd64d2ce628cbe509073c7a218a9bcf924335db932ed5417a9b29d0ba9dced59ff5f884959118c6539fc3acc22be12227bc30034e53fbc22daa75bf9895b5fbae02860d2ac54340bcf9a2bb771e5d4db3ede24fcd5d4934b972e7a7da28c7241694eed776e7cf9e5dc72ef358b9823371437d0bb2bd299cae3d66f34a5b6d15a5f15a637b5af75b9f422a3bc502fb295e1c003adab1d7476a8b5f5ab171be9402cc504e186d448d6ddee8c66e54a34d8178bacc284c54d7e3452a186f53259a9bfcaebb451ee27c575221994a7caa359a4b8255a584633b06404010600000000"], 0x4c5) 18:11:10 executing program 1: semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) gettid() tkill(0x0, 0x0) timer_create(0x0, 0x0, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x1000000000016) 18:11:10 executing program 2: socket(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$P9_RWSTAT(r1, 0x0, 0x25) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffec) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0xffffffffffffff81, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 18:11:10 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='nq\x00', 0x3, 0x0) 18:11:10 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x8}}], 0x2, 0x0) 18:11:10 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0xc62]}) 18:11:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x20}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d63", 0x47}], 0x172, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:10 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) 18:11:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') 18:11:11 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00d\x88\xd2\xa0U\xdb\x1e\x00\x00\x00\x00\x00\x00\x00\x06\xed;\xfb^F\v\xa5\xc5\xd9\xb6>\x1dN') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x320f) 18:11:11 executing program 4: 18:11:11 executing program 3: 18:11:11 executing program 5: 18:11:11 executing program 1: 18:11:11 executing program 0: 18:11:11 executing program 3: 18:11:11 executing program 4: 18:11:11 executing program 1: 18:11:11 executing program 5: 18:11:11 executing program 2: 18:11:11 executing program 0: 18:11:11 executing program 1: 18:11:11 executing program 4: 18:11:11 executing program 2: 18:11:11 executing program 3: 18:11:11 executing program 5: 18:11:11 executing program 0: 18:11:11 executing program 4: 18:11:11 executing program 1: 18:11:11 executing program 3: 18:11:11 executing program 2: 18:11:11 executing program 0: 18:11:11 executing program 5: 18:11:12 executing program 1: 18:11:12 executing program 2: 18:11:12 executing program 0: 18:11:12 executing program 4: 18:11:12 executing program 5: 18:11:12 executing program 3: 18:11:12 executing program 1: 18:11:12 executing program 5: 18:11:12 executing program 0: 18:11:12 executing program 2: 18:11:12 executing program 4: 18:11:12 executing program 3: 18:11:12 executing program 1: 18:11:12 executing program 5: 18:11:12 executing program 0: 18:11:12 executing program 2: 18:11:12 executing program 4: 18:11:12 executing program 3: [ 1660.574019][ C0] net_ratelimit: 22 callbacks suppressed [ 1660.574042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1660.586679][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:12 executing program 1: 18:11:12 executing program 0: 18:11:12 executing program 3: 18:11:12 executing program 5: [ 1660.733859][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1660.740361][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:12 executing program 4: 18:11:12 executing program 2: 18:11:12 executing program 1: 18:11:12 executing program 0: 18:11:13 executing program 4: 18:11:13 executing program 5: 18:11:13 executing program 3: 18:11:13 executing program 2: 18:11:13 executing program 1: 18:11:13 executing program 0: r0 = open(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) personality(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "bf2f99daf68f19af", "c34adc85bd8ced63992840ba069dda1d", "bfeaf537", "78f6170986b4a3ca"}, 0x28) ptrace(0x4207, r1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x5) ioctl$RTC_EPOCH_SET(r2, 0x4004700e, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8990, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x109800, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000001c0)) 18:11:13 executing program 4: r0 = epoll_create(0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0) 18:11:13 executing program 3: io_setup(0x8, &(0x7f0000000000)) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x2000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) wait4(0x0, 0x0, 0x81000001, 0x0) geteuid() socket(0x10, 0x80000000000802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x8}, 0x0, 0x400b, 0x448e370e0511d35e}}, 0x2fe40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) 18:11:13 executing program 5: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x109800, 0x0) 18:11:13 executing program 1: setrlimit(0x9, &(0x7f0000000200)) socket(0x2, 0x2, 0x0) 18:11:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) eventfd(0x0) r0 = getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r1, 0x3, 0x0, 0x1) fallocate(r1, 0x0, 0x0, 0xfff9) 18:11:13 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 18:11:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./file1\x00', 0x0) write$P9_RSTATu(r1, &(0x7f0000000040)=ANY=[], 0x445144e9) sync_file_range(r1, 0x7fff, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000480)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x4, [{0x0, 0x0, 0x7}, {0x8, 0x0, 0x8, 0x0, 0x0, 0x1418}, {0x1, 0x0, 0x7}, {0x0, 0x5, 0x5, 0x0, 0x0, 0x8}]}) 18:11:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') [ 1661.533814][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.540089][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.547072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.553518][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:13 executing program 4: clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="3100000013000900690006342fc56aef40be44081000000046000107000000540d0003c0256465a300000000ffff0000b8", 0x31}], 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:11:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') 18:11:13 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x1000000000000a}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00\x01[$\x04\xe2Q+n\xa6\x93\xcc\x8b\xf6s\xb9E\x15\x7f3\xf0') sendfile(r4, r5, 0x0, 0xedc0) 18:11:13 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) flock(r0, 0x2) [ 1661.766705][ T3135] __nla_validate_parse: 4 callbacks suppressed [ 1661.766732][ T3135] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 18:11:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) [ 1661.864137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.870550][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:14 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000292, 0x0) 18:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') 18:11:14 executing program 5: clone(0x3102001f7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x17, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bpq0\x00'}) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000640), 0x8, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:11:14 executing program 4: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) r1 = syz_open_dev$loop(0x0, 0x3, 0x80000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000180)={{0x0, 0x0, @descriptor="8f5a0625014d2ac1"}, 0xff4e, [], "d3530fe73fb66318dc48430864ebe3191577fdc44c1c42df8653f89013ecd49e9e86f03c6a1995cd52f83c33b0c700da34ab8b57e50038e5"}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) syz_open_dev$char_usb(0xc, 0xb4, 0x6) rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0)='./file0\x00') utimes(&(0x7f0000000080)='./file1\x00', 0x0) 18:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') 18:11:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() unshare(0x28020400) exit(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') 18:11:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x134}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:15 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x143042, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x5cc24425981a0abe) r0 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 18:11:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf}, [@ldst={0x3fd, 0x2}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x46) 18:11:15 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x50000000000, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000240007050000003242ed5408567c1abf", @ANYRES32=r2, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c00fdff4b00020008000500000000000800e32b51b1111346700500000081fb070004000000000008000200000000000800010000000000a802040000000000"], 0x7c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 1663.577715][ T3994] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. 18:11:17 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0xffffffffffffff81, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 18:11:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e040b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0b01000092"], 0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 18:11:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="f3"], 0x1) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000000), 0x40000, 0x3f00}]) 18:11:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffc6, 0x0, 0x0, 0x86040000}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904000a000710100007ffffff08000000020000000000", 0x24) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @remote}, &(0x7f0000000100)=0xc) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) getpeername$packet(r1, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b00)=0x14) accept4(r1, &(0x7f0000001b80)=@hci={0x1f, 0x0}, &(0x7f0000001c00)=0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001d40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e40)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000001f40)=0xe8) accept4$packet(r1, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000021c0)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002240)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002340)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000002440)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002840)={&(0x7f0000002480)={0x3bc, r2, 0x801, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x190, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x756}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x820d}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x37e}}, {0x8, 0x6, r13}}}]}}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r14 = socket(0x10, 0x3, 0x0) getsockname$packet(r14, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5700518da16fe25eed06ea4871379b6fcc445a19e12e142e9307511a623e2793bb9aea17ae1f36f85475fc0a53406cb155f97c5aa09acab7aa14f083b80aff3c189bac8c732636c26268b2cc1c86c9f74c66fe00abff3d05eb3cda61b2cb1d711a9a3e361cad8d35f3f292631fa1950662989338a2b6763805abd90af2e4f96b93e73caa6518", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300000008000100", @ANYRES32=r15, @ANYBLOB="04000200"], 0x20}}, 0x0) r16 = socket(0x10, 0x802, 0x0) write(r16, &(0x7f00000000c0)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) sendmsg$TIPC_NL_BEARER_GET(r16, &(0x7f0000001200)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)=ANY=[]}, 0x1, 0x0, 0x0, 0x20040854}, 0x8000) connect$inet(r16, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) accept4$packet(r16, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14, 0x100000) socketpair(0xb, 0xb, 0xfc, &(0x7f0000000600)={0xffffffffffffffff}) r19 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00)='SEG6\x00') vmsplice(r18, &(0x7f0000000480)=[{&(0x7f0000000740)="88841c790007179e33ae17a2c20be2942f4a422dee13c47107ade612726a7dcab75c6ebde9c69bc8c3551250e33650ff37c083fedffa8ca3b478b170b745ec5e39984e169294ce45fcf6514e7ab08bce585228dd16be645e90f41b2aff1befc2448cce9874dc606b462529e35edd36d2d34991d1e7dddae5d2c6a2b0202b0b69782f668c458fd8ce16d02268f1cb7d4a297ed2d64ef73f1fed47b2c104ae3019e825a85ecf98a768e76d24a191e874c88444d65f5118fca0cf3715ee6a0184f86b51e327086dce37a0fa275bc5ff280a4a07e0666b48d00850f201b7ff2d7bd279db2125e2fb3324e5b78c59516789bb5736ddb1710b4a", 0xf7}, {&(0x7f0000000300)="fed7538fd9091a59f8c5946f92cdce6fc07df7a5e7cdb8e55919113f2e30682303a1285b6bfc73efabbf6fc81bfb83f17b24f6a2f582c9257f2c9518f10827a2ecc6e7a0cba0fab3d182b4228b878b08037b1515eacbdacbec33127f312fe1b6bbfbecb28312bec43f4416183a3f0a242bd716e3afe238c07ecbbdb7f3b8b6a2d157d29c8e9b3d5c0cf9aa1aea6f0e8aa6", 0x91}], 0x2, 0x3) sendmsg$SEG6_CMD_GET_TUNSRC(r18, &(0x7f0000000e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000c40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="6cf18bbe", @ANYRES16=r19, @ANYBLOB="20002bbd7000fedbdf25040000000800050005000000140001000000000000000000000000000000000014000100ff01000000000000000000000000000108000200060000000800050002000000080006000800000008000600000000000800060081000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8962a2657ef077d0}, 0x40010) getpeername$packet(r18, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) r22 = socket(0x10, 0x3, 0x0) getsockname$packet(r22, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002480)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r23}, {0x4}}]}, 0x20}}, 0x0) socketpair(0x4, 0x5, 0x80000000, &(0x7f0000000600)={0xffffffffffffffff}) r25 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00)='SEG6\x00') vmsplice(r24, &(0x7f0000000480)=[{&(0x7f0000000740)}, {&(0x7f0000000300)="fed7538fd9091a59f8c5946f92cdce6fc07df7a5e7cdb8e55919113f2e30682303a1285b6bfc73efabbf6fc81bfb83f17b24f6a2f582c9257f2c9518f10827a2ecc6e7a0cba0fab3d182b4228b878b08037b1515eacbdacbec33127f312fe1b6bbfbecb28312bec43f4416183a3f0a242bd716e3afe238c07ecbbdb7f3b8b6a2d157d29c8e9b3d5c0cf9aa1aea6f0e8aa6", 0x91}], 0x2, 0x3) sendmsg$SEG6_CMD_GET_TUNSRC(r24, &(0x7f0000000e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000c40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="6cf17fbe", @ANYRES16=r25, @ANYBLOB="20002bbd7000fedbdf25040000000800050005000000140001000000000000000000000000000000000014000100ff01000000000000000000000000000108000200060000000800050002000000080006000800000008000600000000000800060081000000"], 0x3}}, 0x40010) getsockopt$inet_IP_IPSEC_POLICY(r24, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) r28 = socket(0x0, 0x3, 0x0) getsockname$packet(r28, 0x0, &(0x7f0000000600)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002480)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002480)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r29}, {0x4}}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002000)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000008c0)=0xffffffffffffffb0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @rand_addr, @initdev}, &(0x7f0000000b80)=0xc) getsockname(0xffffffffffffffff, &(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000d00)=0x80) r34 = socket(0x10, 0x3, 0x0) getsockname$packet(r34, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002480)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r35}, {0x4}}]}, 0x20}}, 0x0) r36 = socket(0x10, 0x3, 0x0) getsockname$packet(r36, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000e8ffffff000000000300020008020100cd15d922f72aa9a50cbd45a1cc0ed9078e46a29894cf96e2dde31ae9da7a514e29eeebd0572f8e772874c3f419794adb947ee8efec22135e15a58b1c51ba6d8c74f4e58a8d8a35be32ee002887e1e12fb59d3397cdbea19bb627801ae913e2a1caee80ee9230a197e9e37eedb51a83d64b6ffff3eeab1a4c91f47a32276400f118ed7c82ec2b90de4fa0dcdb", @ANYRES32=r37, @ANYBLOB="04000200"], 0x5}}, 0x0) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r38, 0x8912, &(0x7f0000000740)=@buf={0x1000, &(0x7f0000000cc0)="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"}) bind$inet6(r38, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r38, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) recvmsg(r38, &(0x7f0000000b00)={&(0x7f0000000780)=@ax25={{0x3, @null}, [@rose, @rose, @netrom, @null, @default, @remote, @rose, @null]}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000880)=""/164, 0xa4}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/135, 0x87}], 0x4, &(0x7f0000001cc0)=""/147, 0x93}, 0x20) getsockopt$inet6_mreq(r38, 0x29, 0x15, &(0x7f0000000d40)={@remote}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000001340)={&(0x7f0000000dc0)={0x4d0, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x138, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x98, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x4094, 0x74453714, 0x4, 0x7}, {0xa8f6, 0xc5d, 0x7, 0x8}, {0x0, 0x7, 0x1, 0x3ff}, {0x0, 0x7, 0x6de, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x210, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r32}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x59f9e684, 0x4, 0x2, 0x101}, {0x1, 0x8b78, 0xb9ed, 0x5}, {0x1f, 0xfffffffffffffff9, 0x9, 0x7}, {0x5, 0xffffffff, 0x2, 0x7ff}]}}}]}}, {{0x8, 0x1, r33}, {0xb0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r37}, {0x4}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r39 = socket$nl_route(0x10, 0x3, 0x0) r40 = socket(0x100000000011, 0x2, 0x0) bind(r40, &(0x7f0000000140)=@generic={0x11, "00001900000000000800449452922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee342b76795000b0000000000000101013c5811039e15775027d6ce66fd792b1b0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000020006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r40, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r39, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket(0x100000000011, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "00001900000000000800449452922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee342b76795000b0000000000000101013c5811039e15775027d6ce66fd792b1b0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000020006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r42, &(0x7f0000000040), &(0x7f00000001c0)=0xb) sendmsg$nl_route_sched(r41, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, {0x1}}}, 0x24}}, 0x0) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket(0x0, 0x2, 0x0) bind(r44, &(0x7f0000000140)=@generic={0x11, "00001900000000000800449452922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee342b76795000b0000000000000101013c5811039e15775027d6ce66fd792b1b0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000020006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r44, 0x0, 0x0) sendmsg$nl_route_sched(r43, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket(0x100000000011, 0x2, 0x0) bind(r46, &(0x7f0000000140)=@generic={0x11, "00001900000000000800449452922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee342b76795000b0000000000000101013c5811039e15775027d6ce66fd792b1b0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000020006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r46, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0xb) sendmsg$nl_route_sched(r45, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, r47, {0x1}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) r48 = socket(0x100000000011, 0x2, 0x0) bind(r48, 0x0, 0x0) getsockname$packet(r48, &(0x7f0000000040), &(0x7f00000001c0)=0xb) socket$nl_route(0x10, 0x3, 0x0) r49 = socket(0x100000000011, 0x2, 0x0) bind(r49, &(0x7f0000000140)=@generic={0x11, "00001900000000000800449452922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee342b76795000b0000000000000101013c5811039e15775027d6ce66fd792b1b0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000020006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r49, &(0x7f0000000040), &(0x7f00000001c0)=0xb) 18:11:17 executing program 5: clone(0x3102001f7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) 18:11:17 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x50000000000, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000240007050000003242ed5408567c1abf", @ANYRES32=r2, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c00fdff4b00020008000500000000000800e32b51b1111346700500000081fb070004000000000008000200000000000800010000000000a802040000000000"], 0x7c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 1665.529554][ T4477] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. 18:11:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d1438733ca9997fb677a0b480f808e1251c0fbac0790ad0cf944599b4b23297e30e613b957bbd0449255697029ec9408003da0c2aca5285838440c370fa8bb7a79b52fe624a56c320517df4ccc52f4b85d0789bba846e", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x107}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0", 0x4a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:11:18 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700001a00000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab09", 0x31}], 0x1) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:11:18 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@local}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x4) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000440)={@multicast2, @local}, 0xc) [ 1666.023865][ C1] net_ratelimit: 18 callbacks suppressed [ 1666.023888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1666.037095][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1666.043496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1666.049636][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr="ffba4195a8914923d5b3b6e33004d368"}, 0x1c) sendfile(r3, r0, 0x0, 0xedc0) 18:11:18 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvfrom(r1, 0x0, 0x262, 0x2000, 0x0, 0xffffffffffffff05) 18:11:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c00000027", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:11:18 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff50700000000000001f70004000000000950000800000000099e99031ba4c0af84cfca176fb423520d2afbdf3f9f9da24171fee230524181e591d2121ef121d08331a01f03a526ca8bd0a8352789deb0d40eb701fcf7854e52f6931da6b47edb80fdf5a0c38acad54521ed5670b1c6ec849ed07b8613ca8e286ff030000d8e36e210acfdd847f50fc1d209c49148eb69858844d020000002b1917e8700ecc941f137f800425cd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) 18:11:19 executing program 0: prctl$PR_GET_DUMPABLE(0x3) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x4e22, @empty}}}, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="339ce5fd46cab5d185be5e4e240881745da3e7c2b8ffcb5158de6c7a52eaad", 0x1f, 0x28c8, &(0x7f0000000140)={0x0, 0x1c9c380}) [ 1668.011297][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.017695][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1668.024930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.031765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1668.038203][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.044391][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:11:20 executing program 5: 18:11:20 executing program 2: 18:11:20 executing program 3: 18:11:20 executing program 1: 18:11:20 executing program 4: 18:11:20 executing program 0: 18:11:20 executing program 2: 18:11:20 executing program 4: 18:11:20 executing program 1: 18:11:20 executing program 0: 18:11:20 executing program 5: 18:11:20 executing program 3: 18:11:20 executing program 1: 18:11:21 executing program 4: 18:11:21 executing program 2: 18:11:21 executing program 0: 18:11:21 executing program 5: 18:11:21 executing program 3: 18:11:21 executing program 2: 18:11:21 executing program 1: 18:11:21 executing program 5: 18:11:21 executing program 4: 18:11:21 executing program 3: 18:11:21 executing program 0: 18:11:21 executing program 2: 18:11:21 executing program 1: 18:11:21 executing program 4: 18:11:21 executing program 5: 18:11:21 executing program 3: 18:11:21 executing program 0: 18:11:21 executing program 2: 18:11:21 executing program 4: 18:11:21 executing program 1: 18:11:21 executing program 5: 18:11:21 executing program 2: 18:11:21 executing program 3: 18:11:21 executing program 0: 18:11:21 executing program 4: 18:11:21 executing program 1: 18:11:21 executing program 2: 18:11:21 executing program 5: 18:11:21 executing program 3: 18:11:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x64}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000100)=0x2, 0x2c7) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:11:22 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00@\x00', 0x1801}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [], @multicast2}}, 0x20) 18:11:22 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr, @multicast1}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) 18:11:22 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000012c0)='veno\x00', 0x5) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) 18:11:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x5, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") socket(0x0, 0x0, 0x0) 18:11:22 executing program 3: socket(0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3c6) socket$netlink(0x10, 0x3, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 18:11:22 executing program 1: r0 = epoll_create(0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0) 18:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r0, r1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:11:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)='2', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:11:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x0, 0x0, "0bda171385d6f0ee7c276e9524de4ef025326df38f6811d7701d17692240610d"}) 18:11:22 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc00c5512, 0x0) 18:11:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821", 0x56}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:11:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 18:11:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 18:11:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e20000007c0e3ca8adbf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c45641455ffc3001e29106fa8cd40e6b02b7dcd2809fe1e135ab17b1fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d1438733ca9997fb677a0b480f808e1251c0fbac0790ad0cf944599b4b23297e30e613b957bbd0449255697029ec9408003da0c2aca5285838440c370fa8bb7a79b52fe624a56c320517df4ccc52f4b85d0789bba846e52e635a0c5e23e5f5643c3b91d4a53be60a6b363f0ffd8f0040f18a35a15c3ac24e3dad88bb1363129b259c596e36308b61ba099429ee68f675f23074467cdc4404ad43e", 0x12e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) ioctl$TCGETX(r3, 0x5432, 0x0) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) [ 1672.174023][ C0] net_ratelimit: 18 callbacks suppressed [ 1672.174046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1672.186594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1672.193427][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1672.199720][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1672.206354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1672.212740][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1672.219516][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1672.226208][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1672.253936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1672.260147][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x8) 18:11:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000002c0)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="ff5b5922af2748bc68dfab8d4c8941f94d8a4e9e2f48f0544f"], 0x19) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, 0x0, &(0x7f0000000380)) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x11, 0x1, {0x44, 0x4}}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in6}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xcf01d642caa0fb71) 18:11:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r0, 0x5432, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 18:11:25 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x50000000000, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000240007050000003242ed5408567c1abf", @ANYRES32, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c00fdff4b00020008000500000000000800020000000000080005000000000008000300000000000800050000008100080004000000000008000200000000000800010000000000a802040000000000"], 0x7c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 18:11:25 executing program 3: prctl$PR_SET_THP_DISABLE(0x29, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00d\x88\xd2\xa0U\xdb\x1e\x00\x00\x00\x00\x00\x00\x00\x06\xed;\xfb^F\v\xa5\xc5\xd9\xb6>\x1dN') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x320f) 18:11:25 executing program 2: clone(0x154041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) 18:11:26 executing program 5: r0 = getpgrp(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)='A', 0x1}], 0x4}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000140)=""/107) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x2, 0xfa}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/216, 0xd8) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0xea000000, 0x79}) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket(0x10, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000400), 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1) 18:11:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000040)) 18:11:26 executing program 4: 18:11:26 executing program 1: 18:11:26 executing program 5: 18:11:26 executing program 4: 18:11:26 executing program 3: 18:11:26 executing program 1: 18:11:26 executing program 5: 18:11:27 executing program 0: 18:11:27 executing program 3: 18:11:29 executing program 2: 18:11:29 executing program 4: 18:11:29 executing program 3: 18:11:29 executing program 1: 18:11:29 executing program 0: 18:11:29 executing program 5: 18:11:29 executing program 0: 18:11:29 executing program 1: 18:11:29 executing program 3: 18:11:29 executing program 5: 18:11:29 executing program 4: 18:11:29 executing program 2: 18:11:29 executing program 1: 18:11:29 executing program 5: 18:11:29 executing program 2: 18:11:29 executing program 0: 18:11:29 executing program 3: 18:11:29 executing program 4: 18:11:29 executing program 1: 18:11:29 executing program 3: 18:11:29 executing program 2: 18:11:29 executing program 5: 18:11:29 executing program 4: 18:11:29 executing program 0: 18:11:29 executing program 3: 18:11:29 executing program 1: 18:11:29 executing program 2: 18:11:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:11:29 executing program 4: 18:11:29 executing program 3: 18:11:29 executing program 0: 18:11:29 executing program 1: 18:11:29 executing program 2: 18:11:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000080)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') syz_open_procfs(0x0, 0x0) 18:11:30 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) 18:11:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffefffffff7f0000) 18:11:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8010550e, 0x0) 18:11:30 executing program 2: epoll_create(0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x2) 18:11:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1678.413696][ C0] net_ratelimit: 26 callbacks suppressed [ 1678.413710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.425941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1678.432246][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.438489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1678.444843][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.450917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1678.457920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.464201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1678.503846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1678.509923][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:30 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') 18:11:30 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x3000000) 18:11:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) 18:11:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r5, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) 18:11:30 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-{\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) execve(0x0, 0x0, 0x0) pipe(0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) creat(0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:11:30 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='$selinux\'eth1#&\x00') 18:11:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) prctl$PR_GET_KEEPCAPS(0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) 18:11:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) 18:11:30 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:30 executing program 4: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 18:11:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 18:11:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) 18:11:31 executing program 3: mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0880b7, 0x0, 0x0) 18:11:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f90", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:31 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0xd0b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) 18:11:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8e18) fallocate(r3, 0x3, 0x0, 0xfff9) 18:11:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 18:11:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4, 0x2}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) 18:11:31 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0xa, 0x3, 0x7ffe, 0x3d, 0x0, 0xffffffffffffffff, 0x0, [0x2400000018cf63, 0xe00000f, 0x9000000, 0x6000000, 0x0, 0x0, 0x32400, 0x0, 0x0, 0xc00200, 0x0, 0x0, 0x32000, 0xf]}, 0x3c) 18:11:31 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:31 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18) r1 = socket$inet6(0xa, 0x80003, 0xff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 18:11:31 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10c) r2 = dup2(r0, r1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 18:11:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140), 0x132156) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{}, "67796c38559911c6", "97f86bb1eeb4ebc7b10ad382434cd676", "48a8a406", "dd71d0e8d9e87563"}, 0x28) 18:11:32 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) clone(0xa10a001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8981, 0x0) r2 = dup2(r0, r0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 18:11:32 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:32 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000001100)={&(0x7f0000000bc0)={0x2, 0x0, @initdev}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="18", 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) r2 = semget(0x1, 0x0, 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x8001, 0x745e, 0x2]) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) pipe(&(0x7f0000000200)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000200)) syz_open_dev$ndb(0x0, 0x0, 0x4200) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x7, 0x8080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000003800)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 18:11:32 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:32 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1cf) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 18:11:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r2, 0x0, 0x116) 18:11:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x5, 0x0, "9527eb1fe4a70061631dce40540ea584dc670e8a5b346583b4b9fd983552f8df14ee9ef7112f35b7d06988ac8f9131a1d9718dde8c44f8ab9d20c6894f2929496f17cef927115402414625e9abc4eb6a"}, 0xd8) 18:11:32 executing program 0: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) 18:11:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x8000000141342, 0x0) write$evdev(r0, &(0x7f0000000280)=[{{0x77359400}}], 0x18) 18:11:32 executing program 3: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0) 18:11:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) 18:11:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}, &(0x7f0000000080)=0x20) 18:11:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 1680.852256][T10249] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 18:11:33 executing program 2: syz_open_dev$hiddev(&(0x7f0000000180)='\xff\x03\x00\x00\xee\xc7\xe9\x14\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2246) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r0, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201fe0009003c0800040042ef420000000109021b00017600000009040000010209bd00070581070001000200bf52cf67944f91a9d38a610007ebe0e5b13a5e0cc8d62a1de15bceea4ebcc97bf1dcea10571deb944e7a8ec545375b35c6594de12e456dc9339f31935ba224cee9617872fe3bbae048333d3e5f10c7fc338b17dbeccdf4c736b30f3b54d58c172fbe7d8a7022a95b481b94730f00cb79a9ef83f2daf4ab1a0aa57054224e0fff1032beeb6c2ae1724001743db45615c0c56367ca156288d718d0af2104ddf079f91ee7d9c1282205fc81070e9521bd5861074df82684ec3701f75bb8"], 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 18:11:33 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x408, 0x3001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4}]}}) 18:11:33 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae", 0x48}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:11:33 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x18) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x0, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 18:11:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8e18) fallocate(r3, 0x3, 0x5e89, 0xfff9) 18:11:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080), 0x4) write$P9_RRENAME(r0, &(0x7f0000000280)={0x7}, 0x7) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1681.333594][T21992] usb 4-1: new high-speed USB device number 48 using dummy_hcd 18:11:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x23a}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe64377a222d3fbf9d225bae78aba9d7ae45b0051a1221af27656f0372a9567bb821942ce72590f1bf41d20d4c0821", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 18:11:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./file1\x00', 0x0) write$P9_RSTATu(r1, &(0x7f0000000040)=ANY=[], 0x445144e9) sync_file_range(r1, 0x7fff, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0xfffffffffffffff9}) 18:11:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="050000000020000061100c000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4, 0x10, &(0x7f0000000000), 0x4}, 0x14) [ 1681.584725][T21992] usb 4-1: Using ep0 maxpacket: 8 18:11:33 executing program 1: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x3}}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) 18:11:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) chown(0x0, 0x0, 0x0) stat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getgroups(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f90", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:33 executing program 4: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x0, 0x1) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) [ 1681.706877][T21992] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.717469][T21992] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.729383][T21992] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1681.741142][T21992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.838325][T21992] hub 4-1:118.0: ignoring external hub [ 1681.874651][T21992] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device 18:11:34 executing program 3: 18:11:34 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth1\x00\x00 \x00A\x83\x86\xf4\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x272) sendto$inet(r0, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f"], 0x1) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x142) 18:11:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:11:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:34 executing program 4: [ 1682.194296][T28335] usb 4-1: USB disconnect, device number 48 18:11:34 executing program 3: 18:11:34 executing program 4: 18:11:34 executing program 2: 18:11:34 executing program 0: 18:11:34 executing program 0: 18:11:34 executing program 4: 18:11:34 executing program 3: 18:11:35 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:35 executing program 2: 18:11:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b64337c"], 0x10}}, 0x0) 18:11:35 executing program 4: 18:11:35 executing program 0: 18:11:35 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c00000027", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x3f) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0xe) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x9, 0x0, 0x474826c9e6f441eb, 0x2}, 0x10}}, 0x0) 18:11:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00E\xc1$\x16\xe2\xd9 \x87q0\xc6C\xc4\xf7\x868L\x8f\xa4y\xfe\xe3\xd8{><\xd0\x15v\xae8t\'\xbc\x96\xa4r\xe5R#\x84hk9\x00\x00\x00\x00\x00\x00\x00\x00\x00|.\xecj\xbb\xf1#\x1d6Am\xc8\x1d\x98\xf3\xdd\xd3G\xdfU3\xc0\x92S\x9b\x17\x02\x1a\xdf\xe3S\x8d\x95\xca\x8b\xfa\x89iv\x9e\f\x1f\x9eS\xac\xb9\xa13\xbb\xcc-\x06\x1a\x9b\x91\xa69\xb2=\xd2\x18\xa5\x86\x9cT\x8dRS\xcd,\xdc\xae\'\xb3x^H|v\xb5\xf5}1\xfe/\x16f\xaaJ') getdents64(r0, &(0x7f00000000c0)=""/79, 0x4f) getdents(r0, &(0x7f0000000000)=""/27, 0x1b) 18:11:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x88a8ffff, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) 18:11:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) 18:11:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b64337c"], 0x10}}, 0x0) 18:11:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)) 18:11:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:36 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:11:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000001080)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x15) 18:11:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00E\xc1$\x16\xe2\xd9 \x87q0\xc6C\xc4\xf7\x868L\x8f\xa4y\xfe\xe3\xd8{><\xd0\x15v\xae8t\'\xbc\x96\xa4r\xe5R#\x84hk9\x00\x00\x00\x00\x00\x00\x00\x00\x00|.\xecj\xbb\xf1#\x1d6Am\xc8\x1d\x98\xf3\xdd\xd3G\xdfU3\xc0\x92S\x9b\x17\x02\x1a\xdf\xe3S\x8d\x95\xca\x8b\xfa\x89iv\x9e\f\x1f\x9eS\xac\xb9\xa13\xbb\xcc-\x06\x1a\x9b\x91\xa69\xb2=\xd2\x18\xa5\x86\x9cT\x8dRS\xcd,\xdc\xae\'\xb3x^H|v\xb5\xf5}1\xfe/\x16f\xaaJ') getdents64(r0, &(0x7f00000000c0)=""/79, 0x4f) getdents(r0, &(0x7f0000000000)=""/27, 0x1b) 18:11:36 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, 0x0) 18:11:36 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="eabe9f303b222906eecbc624877c825255f910c28f5e87a64820546a1ebe"], 0x0, 0x1e}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:11:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000440)={&(0x7f00000019c0)={0x14, 0x0, 0x9, 0x1}, 0x14}}, 0x0) 18:11:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b64337c"], 0x10}}, 0x0) 18:11:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\xff', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:11:36 executing program 0: 18:11:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:36 executing program 3: [ 1684.653891][ C0] net_ratelimit: 26 callbacks suppressed [ 1684.653915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.666224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.672720][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.679254][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.685766][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.691911][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.698529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.704957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.733990][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.741251][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:11:36 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:36 executing program 2: 18:11:36 executing program 0: 18:11:36 executing program 4: 18:11:36 executing program 3: 18:11:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:37 executing program 2: 18:11:37 executing program 4: 18:11:37 executing program 3: 18:11:37 executing program 0: 18:11:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:37 executing program 2: 18:11:37 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:37 executing program 0: 18:11:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc340000000000109022400010000a000090400000103010100092100000001220500090581030000000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0x0, 0xe, {0xe, 0x0, "3680e0c63611876123921398"}}, 0x0, 0x0, 0x0}, 0x0) 18:11:37 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xee, 0x4f, 0xf4, 0x40, 0x12d1, 0x1404, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xf6, 0x50}}]}}]}}, 0x0) 18:11:37 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0x63, 0x8f, 0x40, 0x13dc, 0x5611, 0x4015, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xe0, 0x2, 0x1, 0x0, [], [{{0x9, 0x5, 0x84, 0x3}}, {}]}}]}}]}}, 0x0) 18:11:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:38 executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x0, '^'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "4cc2c9", "aa85"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:11:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:38 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1686.153582][T28335] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1686.156847][T18397] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1686.164001][T21992] usb 4-1: new high-speed USB device number 49 using dummy_hcd 18:11:38 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:38 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1686.317913][T11832] usb 1-1: new high-speed USB device number 30 using dummy_hcd 18:11:38 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1686.413668][T21992] usb 4-1: Using ep0 maxpacket: 32 [ 1686.513920][T28335] usb 3-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 1686.523616][T28335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.536818][T28335] usb 3-1: config 0 descriptor?? [ 1686.553937][T21992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.554050][T18397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1686.565269][T21992] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1686.576534][T18397] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1686.585661][T21992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.590576][T21992] usb 4-1: config 0 descriptor?? [ 1686.597567][T18397] usb 5-1: New USB device found, idVendor=13dc, idProduct=5611, bcdDevice=40.15 [ 1686.608655][T28335] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1686.610978][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.628633][T11832] usb 1-1: Using ep0 maxpacket: 8 [ 1686.645531][T21992] hub 4-1:0.0: ignoring external hub [ 1686.699768][T18397] usb 5-1: config 0 descriptor?? [ 1686.749113][T18397] hwa-hc 5-1:0.0: cannot find Wire Adapter Class descriptor [ 1686.757189][T18397] hwa-hc 5-1:0.0: Cannot initialize internals: -19 [ 1686.783718][T11832] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 94, using maximum allowed: 30 [ 1686.794876][T11832] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1686.806158][T11832] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 94 [ 1686.819386][T11832] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1686.836568][T18397] usb 3-1: USB disconnect, device number 60 [ 1686.948403][ T4884] usb 5-1: USB disconnect, device number 56 [ 1686.983739][T11832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1686.993252][T11832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.001585][T11832] usb 1-1: Product: syz [ 1687.006136][T11832] usb 1-1: Manufacturer: syz [ 1687.010829][T11832] usb 1-1: SerialNumber: syz [ 1687.143711][T21992] usbhid 4-1:0.0: can't add hid device: -71 [ 1687.150072][T21992] usbhid: probe of 4-1:0.0 failed with error -71 [ 1687.206310][T21992] usb 4-1: USB disconnect, device number 49 [ 1687.364317][T11832] hub 1-1:1.1: ignoring external hub [ 1687.405414][T11832] usb 1-1: USB disconnect, device number 30 [ 1687.613650][T28335] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1687.723550][T21992] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1687.843518][T10995] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1687.973694][T28335] usb 3-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 1687.982962][T28335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.994780][T28335] usb 3-1: config 0 descriptor?? [ 1688.023654][T11832] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1688.036532][T28335] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1688.084743][T21992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1688.096203][T21992] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1688.107393][T21992] usb 5-1: New USB device found, idVendor=13dc, idProduct=5611, bcdDevice=40.15 [ 1688.116719][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.126277][T10995] usb 4-1: Using ep0 maxpacket: 32 [ 1688.132683][T21992] usb 5-1: config 0 descriptor?? [ 1688.179525][T21992] hwa-hc 5-1:0.0: cannot find Wire Adapter Class descriptor [ 1688.187765][T21992] hwa-hc 5-1:0.0: Cannot initialize internals: -19 [ 1688.237882][ T4884] usb 3-1: USB disconnect, device number 61 [ 1688.243785][T10995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.256065][T10995] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1688.265496][T10995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.275282][T10995] usb 4-1: config 0 descriptor?? [ 1688.304385][T11832] usb 1-1: Using ep0 maxpacket: 8 [ 1688.315256][T10995] hub 4-1:0.0: ignoring external hub [ 1688.376230][T21992] usb 5-1: USB disconnect, device number 57 [ 1688.443733][T11832] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 94, using maximum allowed: 30 [ 1688.454880][T11832] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1688.466599][T11832] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 94 [ 1688.479715][T11832] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1688.603688][T10995] usbhid 4-1:0.0: can't add hid device: -71 [ 1688.610165][T10995] usbhid: probe of 4-1:0.0 failed with error -71 [ 1688.645355][T10995] usb 4-1: USB disconnect, device number 50 [ 1688.663863][T11832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1688.673184][T11832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.681411][T11832] usb 1-1: Product: syz [ 1688.685842][T11832] usb 1-1: Manufacturer: syz [ 1688.690496][T11832] usb 1-1: SerialNumber: syz 18:11:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0xfccb, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@main=@item_012={0x2, 0x0, 0x0, "69f5"}, @global=@item_012={0x0, 0x1, 0x0, "1a"}, @global=@item_012={0x29f}, @global=@item_4={0x3, 0x1, 0x0, "d955359e"}, @main=@item_012={0x0, 0x0, 0x0, "857b"}, @main=@item_4={0x3, 0x0, 0x0, "dc9b3b2c"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "b65f3566"}]}}, 0x0}, 0x0) 18:11:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:40 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:40 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0x9, 0x33, 0x10, 0x1a0a, 0x104, 0xfa85, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0xc0, 0xaa}}]}}]}}, 0x0) 18:11:41 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/169], 0x0) 18:11:41 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xdb, 0xd9, 0x48, 0x40, 0xace, 0x20ff, 0x101, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9e, 0x67, 0x71}}]}}]}}, 0x0) 18:11:41 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1689.077474][T11832] hub 1-1:1.1: ignoring external hub 18:11:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:41 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1689.254090][T18397] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1689.263435][ T4884] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1689.344942][T11832] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 1689.384039][T10995] usb 5-1: new high-speed USB device number 58 using dummy_hcd 18:11:41 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1689.493665][T18397] usb 4-1: Using ep0 maxpacket: 16 [ 1689.514121][ T4884] usb 3-1: Using ep0 maxpacket: 16 [ 1689.583734][T11832] usb 1-1: Using ep0 maxpacket: 32 [ 1689.614547][T18397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.626007][T18397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1689.639254][T18397] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1689.648553][T18397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.657815][T11832] usb 1-1: device firmware changed [ 1689.663826][ T4884] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=fa.85 [ 1689.673116][ T4884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.684006][T11832] usb 1-1: USB disconnect, device number 31 [ 1689.691516][ T4884] usb 3-1: config 0 descriptor?? [ 1689.711379][T18397] usb 4-1: config 0 descriptor?? [ 1689.767057][T10995] usb 5-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 1689.776637][T10995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.805897][T10995] usb 5-1: config 0 descriptor?? [ 1689.847565][T10995] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1689.858414][T10995] usb-storage 5-1:0.0: device ignored [ 1689.937004][T10995] usb 3-1: USB disconnect, device number 62 [ 1690.048447][ T4884] usb 5-1: USB disconnect, device number 58 [ 1690.073569][T11832] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1690.196432][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.204184][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.212654][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.220261][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.227832][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.235440][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.242904][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.250586][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.258036][T18397] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1690.266112][T18397] microsoft 0003:045E:07DA.0034: No inputs registered, leaving [ 1690.283851][T18397] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1690.393541][T11832] usb 1-1: Using ep0 maxpacket: 32 [ 1690.400230][T10995] usb 4-1: USB disconnect, device number 51 [ 1690.513686][T11832] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1690.522885][T11832] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1690.533513][T11832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1690.693870][T11832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1690.703490][T11832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.711638][T11832] usb 1-1: Product: syz [ 1690.716098][T11832] usb 1-1: Manufacturer: syz [ 1690.720773][T11832] usb 1-1: SerialNumber: syz [ 1690.723516][T21992] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1690.823575][ T4884] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1690.893825][ C0] net_ratelimit: 26 callbacks suppressed [ 1690.893839][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.906169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.912732][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.913154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.924990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.931305][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.937957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.944336][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.983936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.990023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.996833][T21992] usb 3-1: Using ep0 maxpacket: 16 [ 1691.044266][T11832] usb 1-1: 0:2 : does not exist [ 1691.072410][T11832] usb 1-1: USB disconnect, device number 32 [ 1691.123959][T21992] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=fa.85 [ 1691.133648][T21992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.144829][T21992] usb 3-1: config 0 descriptor?? [ 1691.194192][ T4884] usb 5-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 1691.203597][ T4884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.213915][T10995] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1691.214393][ T4884] usb 5-1: config 0 descriptor?? [ 1691.267008][ T4884] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1691.277958][ T4884] usb-storage 5-1:0.0: device ignored [ 1691.385416][T21992] usb 3-1: USB disconnect, device number 63 [ 1691.467243][T28335] usb 5-1: USB disconnect, device number 59 [ 1691.483905][T10995] usb 4-1: Using ep0 maxpacket: 16 [ 1691.623846][T10995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.635629][T10995] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1691.649006][T10995] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1691.658219][T10995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.668603][T10995] usb 4-1: config 0 descriptor?? [ 1691.743763][T11742] usb 1-1: new high-speed USB device number 33 using dummy_hcd 18:11:44 executing program 3: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0xeb, 0xf2, 0x8, 0x6cd, 0x11a, 0xa6d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf9, 0x0, 0xa0, 0x0, [], [{{0x7, 0x5, 0x6, 0x2}}]}}]}}]}}, 0x0) 18:11:44 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:44 executing program 2: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xd}}}, 0x0) [ 1691.986029][T11742] usb 1-1: Using ep0 maxpacket: 32 [ 1692.084523][T10995] usbhid 4-1:0.0: can't add hid device: -71 [ 1692.091887][T10995] usbhid: probe of 4-1:0.0 failed with error -71 [ 1692.102714][T10995] usb 4-1: USB disconnect, device number 52 [ 1692.111638][T11742] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1692.120832][T11742] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1692.131331][T11742] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1692.293719][T11742] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1692.303425][T11742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.311493][T11742] usb 1-1: Product: syz [ 1692.315897][T11742] usb 1-1: Manufacturer: syz [ 1692.320573][T11742] usb 1-1: SerialNumber: syz [ 1692.326557][T28335] usb 3-1: new high-speed USB device number 64 using dummy_hcd 18:11:44 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/169], 0x0) 18:11:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x29a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xab}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x38, &(0x7f0000000340)=@string={0x38, 0x3, "7c03029aabb0f6fa8572f8fc78a9e495ac8a5487c50bc9b09260a1dbe4838dd5840b76e237ee3632f6440c222a5482c03701efa185ac"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xab}}, &(0x7f0000000b40)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:44 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1692.533881][T10995] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1692.574218][T11742] usb 1-1: 0:2 : does not exist 18:11:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1692.630261][T11742] usb 1-1: USB disconnect, device number 33 18:11:44 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1692.693813][T28335] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1692.702756][T28335] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 18:11:44 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1692.813660][T21992] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1692.883959][T28335] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1692.893137][T28335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.901402][T28335] usb 3-1: Product: syz [ 1692.905789][T28335] usb 3-1: Manufacturer: syz [ 1692.910503][T28335] usb 3-1: SerialNumber: syz [ 1692.917175][T10995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 18:11:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1692.927830][T10995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 1692.938145][T10995] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=a6.d8 [ 1692.947496][T10995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.998844][T10995] usb 4-1: config 0 descriptor?? [ 1693.033566][T11742] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1693.045008][T10995] hub 4-1:0.0: ignoring external hub [ 1693.052413][T10995] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected [ 1693.093522][T21992] usb 5-1: Using ep0 maxpacket: 16 [ 1693.174405][T10995] usb 4-1: Direct firmware load for keyspan/usa49wlc.fw failed with error -2 [ 1693.183562][T10995] usb 4-1: ezusb_ihex_firmware_download - request "keyspan/usa49wlc.fw" failed [ 1693.192742][T10995] usb 4-1: failed to load firmware "keyspan/usa49wlc.fw" [ 1693.200226][T10995] keyspan: probe of 4-1:0.0 failed with error -2 [ 1693.248433][T10995] usb 4-1: USB disconnect, device number 53 [ 1693.256804][T21992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.268037][T21992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1693.281485][T21992] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 1693.291048][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.300054][T11742] usb 1-1: Using ep0 maxpacket: 32 [ 1693.308220][T21992] usb 5-1: config 0 descriptor?? [ 1693.423835][T11742] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1693.432827][T11742] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1693.443580][T11742] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1693.454016][T28335] usb 3-1: 0:2 : does not exist [ 1693.604007][T11742] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1693.613646][T11742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.621711][T11742] usb 1-1: Product: syz [ 1693.626086][T11742] usb 1-1: Manufacturer: syz [ 1693.630749][T11742] usb 1-1: SerialNumber: syz [ 1693.648725][ T4884] usb 3-1: USB disconnect, device number 64 [ 1693.786283][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.793249][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x2 [ 1693.800392][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.807465][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.814535][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.821477][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.828585][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.835633][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.842558][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.849656][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.856731][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.863915][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.871276][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.878487][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.885953][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.892877][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.899987][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.907295][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.914439][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.921444][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.928505][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.935784][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.942772][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.949836][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.957002][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.964009][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.970852][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.977986][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.985014][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.991883][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1693.998984][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.005992][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.013045][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.020280][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.027431][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.033547][T11832] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 1694.034533][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.050098][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.057218][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.064244][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.071189][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.078196][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.085135][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.092211][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.099447][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.106399][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.113525][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.120480][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.127615][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.134667][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.141544][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.148696][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.156259][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.163521][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.170544][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.177976][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.185160][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.192229][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 1694.199462][T21992] kye 0003:0458:0138.0035: unknown main item tag 0x7 [ 1694.206655][T21992] kye 0003:0458:0138.0035: unknown global tag 0xc [ 1694.213260][T21992] kye 0003:0458:0138.0035: item 0 1 1 12 parsing failed [ 1694.220874][T21992] kye 0003:0458:0138.0035: parse failed [ 1694.226930][T21992] kye: probe of 0003:0458:0138.0035 failed with error -22 [ 1694.237562][T21992] usb 5-1: USB disconnect, device number 60 [ 1694.294149][T11742] usb 1-1: 0:2 : does not exist [ 1694.320846][T11742] usb 1-1: USB disconnect, device number 34 [ 1694.463892][T11832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.474363][T11832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 1694.484712][T11832] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=a6.d8 [ 1694.493925][T11832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.503003][ T4884] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1694.514628][T11832] usb 4-1: config 0 descriptor?? [ 1694.565276][T11832] hub 4-1:0.0: ignoring external hub [ 1694.572147][T11832] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected [ 1694.581274][T11832] usb 4-1: Direct firmware load for keyspan/usa49wlc.fw failed with error -2 [ 1694.590402][T11832] usb 4-1: ezusb_ihex_firmware_download - request "keyspan/usa49wlc.fw" failed [ 1694.599641][T11832] usb 4-1: failed to load firmware "keyspan/usa49wlc.fw" [ 1694.607311][T11832] keyspan: probe of 4-1:0.0 failed with error -2 [ 1694.793559][T21992] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1694.893755][ T4884] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1694.893851][T11742] usb 4-1: USB disconnect, device number 54 [ 1694.902691][ T4884] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1695.053525][T21992] usb 5-1: Using ep0 maxpacket: 16 18:11:47 executing program 3: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0xeb, 0xf2, 0x8, 0x6cd, 0x11a, 0xa6d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf9, 0x0, 0xa0, 0x0, [], [{{0x7, 0x5, 0x6, 0x2}}]}}]}}]}}, 0x0) 18:11:47 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1695.073854][ T4884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1695.083214][ T4884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.091652][ T4884] usb 3-1: Product: syz [ 1695.096113][ T4884] usb 3-1: Manufacturer: syz [ 1695.100905][ T4884] usb 3-1: SerialNumber: syz [ 1695.195543][T21992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.206916][T21992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1695.220155][T21992] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 1695.229421][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:11:47 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x306, 0xff3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x3c4, 0x0, 0x2, [{0xb9, &(0x7f00000001c0)}, {0x12f, &(0x7f0000000280)=@string={0x12f, 0x3, "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"}}]}) 18:11:47 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/169], 0x0) [ 1695.253817][T21992] usb 5-1: config 0 descriptor?? [ 1695.333885][ T4884] usb 3-1: 0:2 : does not exist [ 1695.367478][ T4884] usb 3-1: USB disconnect, device number 65 [ 1695.434161][T11832] usb 4-1: new low-speed USB device number 55 using dummy_hcd 18:11:47 executing program 4: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0xc}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0xf4, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:11:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:47 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1695.583662][T18397] usb 1-1: new high-speed USB device number 35 using dummy_hcd 18:11:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:47 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1695.633999][T21992] usbhid 5-1:0.0: can't add hid device: -71 [ 1695.640232][T21992] usbhid: probe of 5-1:0.0 failed with error -71 [ 1695.654470][T21992] usb 5-1: USB disconnect, device number 61 [ 1695.743649][ T4884] usb 3-1: new high-speed USB device number 66 using dummy_hcd 18:11:47 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1695.834312][T11832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.845845][T11832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 1695.856063][T11832] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=a6.d8 [ 1695.865328][T11832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.874317][T18397] usb 1-1: Using ep0 maxpacket: 32 [ 1695.882392][T11832] usb 4-1: config 0 descriptor?? 18:11:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1695.946861][T11832] hub 4-1:0.0: ignoring external hub [ 1695.954742][T11832] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected [ 1695.963811][T11832] usb 4-1: Direct firmware load for keyspan/usa49wlc.fw failed with error -2 [ 1695.972827][T11832] usb 4-1: ezusb_ihex_firmware_download - request "keyspan/usa49wlc.fw" failed [ 1695.982154][T11832] usb 4-1: failed to load firmware "keyspan/usa49wlc.fw" [ 1695.989627][T11832] keyspan: probe of 4-1:0.0 failed with error -2 [ 1696.024649][T21992] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1696.034294][T18397] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1696.045044][T18397] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1696.059449][T18397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1696.224218][ T4884] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1696.263573][T21992] usb 5-1: Using ep0 maxpacket: 32 [ 1696.273890][T18397] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1696.274054][T11742] usb 4-1: USB disconnect, device number 55 [ 1696.283117][T18397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.297304][T18397] usb 1-1: Product: syz [ 1696.301566][T18397] usb 1-1: Manufacturer: syz [ 1696.306307][T18397] usb 1-1: SerialNumber: syz [ 1696.312113][ T4884] usb 3-1: string descriptor 0 read error: -22 [ 1696.318684][ T4884] usb 3-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 1696.327960][ T4884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.379152][ T4884] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1696.384016][T21992] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1696.395967][T21992] usb 5-1: config 1 has no interface number 1 [ 1696.402191][T21992] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1696.415378][T21992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1696.583931][T21992] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1696.593402][T21992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.602799][T21992] usb 5-1: Product: syz [ 1696.607193][T21992] usb 5-1: Manufacturer: syz [ 1696.611863][T21992] usb 5-1: SerialNumber: syz [ 1696.617894][ T4884] usb 3-1: USB disconnect, device number 66 18:11:48 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:11:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:48 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1696.674016][T18397] usb 1-1: 0:2 : does not exist [ 1696.692715][T18397] usb 1-1: USB disconnect, device number 35 [ 1696.963970][T21992] usb 5-1: 2:1 : unsupported format bits 0x1000 [ 1697.016409][T21992] usb 5-1: USB disconnect, device number 62 [ 1697.033471][T11832] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1697.133920][ C0] net_ratelimit: 26 callbacks suppressed [ 1697.133941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1697.146382][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1697.152981][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1697.159498][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1697.166650][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1697.173043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1697.180825][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1697.187395][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1697.213902][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1697.221121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1697.314031][T11832] usb 4-1: Using ep0 maxpacket: 32 [ 1697.433911][T11832] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1697.442736][T11832] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1697.453113][T11832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1697.463449][T18397] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1697.613834][T11832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1697.623465][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.631532][T11832] usb 4-1: Product: syz [ 1697.635902][T11832] usb 4-1: Manufacturer: syz [ 1697.641009][T11832] usb 4-1: SerialNumber: syz [ 1697.653533][T21992] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1697.823765][T18397] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1697.874330][T18397] usb 3-1: string descriptor 0 read error: -22 [ 1697.880797][T18397] usb 3-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 1697.890680][T18397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.903736][T21992] usb 5-1: Using ep0 maxpacket: 32 [ 1697.938443][T18397] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1698.043700][T21992] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1698.052944][T21992] usb 5-1: config 1 has no interface number 1 [ 1698.059364][T21992] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1698.072359][T21992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1698.113983][T11832] usb 4-1: 0:2 : does not exist [ 1698.129545][T11832] usb 4-1: USB disconnect, device number 56 [ 1698.138478][T18397] usb 3-1: USB disconnect, device number 67 18:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b64337c"], 0x10}}, 0x0) 18:11:50 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1698.273686][T21992] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1698.282852][T21992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.291486][T21992] usb 5-1: Product: syz [ 1698.295828][T21992] usb 5-1: Manufacturer: syz [ 1698.300551][T21992] usb 5-1: SerialNumber: syz 18:11:50 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/169], 0x0) 18:11:50 executing program 2: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x4, 0x98}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:11:50 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:50 executing program 4: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0xc}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0xf4, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1698.623902][T21992] usb 5-1: 2:1 : unsupported format bits 0x1000 [ 1698.701474][T21992] usb 5-1: USB disconnect, device number 63 18:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 18:11:50 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1698.864469][T11742] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1698.933887][T11832] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1698.953594][T18397] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1699.103500][T11742] usb 4-1: Using ep0 maxpacket: 32 [ 1699.109007][T21992] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1699.203663][T11832] usb 3-1: Using ep0 maxpacket: 16 [ 1699.223563][T18397] usb 1-1: Using ep0 maxpacket: 32 [ 1699.223657][T11742] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1699.223739][T11742] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1699.248314][T11742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.323813][T11832] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1699.332773][T11832] usb 3-1: config 1 has an invalid interface number: 152 but max is 2 [ 1699.341302][T11832] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1699.351748][T11832] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1699.360939][T11832] usb 3-1: config 1 has no interface number 1 [ 1699.367298][T11832] usb 3-1: too many endpoints for config 1 interface 152 altsetting 7: 36, using maximum allowed: 30 [ 1699.378437][T11832] usb 3-1: config 1 interface 152 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1699.391970][T11832] usb 3-1: config 1 interface 152 has no altsetting 0 [ 1699.393560][T21992] usb 5-1: Using ep0 maxpacket: 32 [ 1699.399263][T18397] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1699.413039][T18397] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1699.423522][T18397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.433992][T11742] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.443535][T11742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.451624][T11742] usb 4-1: Product: syz [ 1699.456320][T11742] usb 4-1: Manufacturer: syz [ 1699.461052][T11742] usb 4-1: SerialNumber: syz [ 1699.553836][T21992] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1699.563368][T21992] usb 5-1: config 1 has no interface number 1 [ 1699.574301][T21992] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1699.583951][T11832] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.588834][T21992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1699.597901][T11832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.597981][T11832] usb 3-1: Product: syz [ 1699.623187][T11832] usb 3-1: Manufacturer: syz [ 1699.628065][T11832] usb 3-1: SerialNumber: syz [ 1699.633832][T18397] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.643128][T18397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.651305][T18397] usb 1-1: Product: syz [ 1699.655897][T18397] usb 1-1: Manufacturer: syz [ 1699.660726][T18397] usb 1-1: SerialNumber: syz [ 1699.774034][T21992] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.783600][T21992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.791792][T21992] usb 5-1: Product: syz [ 1699.796247][T21992] usb 5-1: Manufacturer: syz [ 1699.801057][T21992] usb 5-1: SerialNumber: syz [ 1699.807351][T11742] usb 4-1: 0:2 : does not exist 18:11:51 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:11:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b64337c"], 0x10}}, 0x0) 18:11:51 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1699.834759][T11742] usb 4-1: USB disconnect, device number 57 [ 1699.994379][T11832] usb 3-1: 0:2 : does not exist 18:11:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 1700.023666][T11832] usb 3-1: USB disconnect, device number 68 [ 1700.114316][T18397] usb 1-1: 0:2 : does not exist [ 1700.146968][T18397] usb 1-1: USB disconnect, device number 36 [ 1700.223761][T21992] usb 5-1: 2:1 : unsupported format bits 0x1000 18:11:52 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1700.338261][T21992] usb 5-1: USB disconnect, device number 64 18:11:52 executing program 0: [ 1700.533777][T11742] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1700.773791][T11742] usb 4-1: Using ep0 maxpacket: 32 [ 1700.833628][T11832] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1700.893723][T11742] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1700.902639][T11742] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1700.913176][T11742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1701.073829][T11742] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1701.084475][T11742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.092764][T11742] usb 4-1: Product: syz [ 1701.093428][T11832] usb 3-1: Using ep0 maxpacket: 16 [ 1701.097700][T11742] usb 4-1: Manufacturer: syz [ 1701.107501][T11742] usb 4-1: SerialNumber: syz [ 1701.213782][T11832] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1701.222830][T11832] usb 3-1: config 1 has an invalid interface number: 152 but max is 2 [ 1701.231278][T11832] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1701.241509][T11832] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1701.251327][T11832] usb 3-1: config 1 has no interface number 1 [ 1701.257679][T11832] usb 3-1: too many endpoints for config 1 interface 152 altsetting 7: 36, using maximum allowed: 30 [ 1701.268880][T11832] usb 3-1: config 1 interface 152 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1701.284935][T11832] usb 3-1: config 1 interface 152 has no altsetting 0 [ 1701.463760][T11832] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1701.472892][T11832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.483138][T11832] usb 3-1: Product: syz [ 1701.487550][T11832] usb 3-1: Manufacturer: syz [ 1701.492290][T11832] usb 3-1: SerialNumber: syz [ 1701.603924][T11742] usb 4-1: 0:2 : does not exist [ 1701.619202][T11742] usb 4-1: USB disconnect, device number 58 18:11:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf3, 0xb5, 0xf1, 0x8, 0x4e8, 0xa101, 0xcf1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x96, 0xfb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001e00)={0xac, &(0x7f0000000340)={0x0, 0x0, 0x4, "42fc104d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b64337c"], 0x10}}, 0x0) 18:11:53 executing program 0: 18:11:53 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xed, 0x38, 0x2, 0x8, 0x5e3, 0x505, 0xeaa3, 0x0, 0x0, 0x2, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) 18:11:53 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1701.744451][T11832] usb 3-1: 0:2 : does not exist 18:11:53 executing program 0: [ 1701.850220][T11832] usb 3-1: USB disconnect, device number 69 [ 1702.003599][T21992] usb 5-1: new high-speed USB device number 65 using dummy_hcd 18:11:54 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:11:54 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) 18:11:54 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 18:11:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) [ 1702.273546][T21992] usb 5-1: Using ep0 maxpacket: 8 [ 1702.293876][T11832] usb 3-1: new high-speed USB device number 70 using dummy_hcd 18:11:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) [ 1702.409253][T21992] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 1702.417590][T21992] usb 5-1: config 0 has no interface number 0 [ 1702.503747][T11742] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1702.511907][T21992] usb 5-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=ea.a3 [ 1702.521911][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 1702.530516][T21992] usb 5-1: SerialNumber: syz [ 1702.533604][T11832] usb 3-1: Using ep0 maxpacket: 8 [ 1702.538766][T21992] usb 5-1: config 0 descriptor?? [ 1702.597310][T21992] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1702.604774][T21992] uvcvideo: No valid video chain found. [ 1702.653844][T11832] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=cf.1b [ 1702.663018][T11832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.672975][T11832] usb 3-1: config 0 descriptor?? [ 1702.746832][T11742] usb 4-1: Using ep0 maxpacket: 32 [ 1702.796971][T18397] usb 5-1: USB disconnect, device number 65 [ 1702.865237][T11742] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1702.874282][T11742] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1702.884670][T11742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1703.083764][T11742] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1703.093836][T11742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.102234][T11742] usb 4-1: Product: syz [ 1703.106776][T11742] usb 4-1: Manufacturer: syz [ 1703.111635][T11742] usb 4-1: SerialNumber: syz [ 1703.136568][T18397] usb 3-1: USB disconnect, device number 70 [ 1703.383918][ C0] net_ratelimit: 26 callbacks suppressed [ 1703.383936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1703.396819][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1703.403037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1703.409450][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1703.415800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1703.422856][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1703.429881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1703.436215][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1703.453770][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1703.460131][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1703.583654][T21992] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1703.613744][T11742] usb 4-1: 0:2 : does not exist [ 1703.630328][T11742] usb 4-1: USB disconnect, device number 59 [ 1703.823431][T21992] usb 5-1: Using ep0 maxpacket: 8 [ 1703.913578][T10995] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1703.943794][T21992] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 1703.951967][T21992] usb 5-1: config 0 has no interface number 0 [ 1704.033709][T21992] usb 5-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=ea.a3 [ 1704.043000][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 1704.051616][T21992] usb 5-1: SerialNumber: syz [ 1704.058259][T21992] usb 5-1: config 0 descriptor?? [ 1704.108233][T21992] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1704.115483][T21992] uvcvideo: No valid video chain found. [ 1704.183508][T10995] usb 3-1: Using ep0 maxpacket: 8 [ 1704.305486][T18397] usb 5-1: USB disconnect, device number 66 [ 1704.313711][T10995] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=cf.1b [ 1704.323072][T10995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.332715][T10995] usb 3-1: config 0 descriptor?? [ 1704.603734][T10995] r8152 3-1:0.0: Unknown version 0x0000 [ 1704.613750][T10995] usb 3-1: USB disconnect, device number 71 18:11:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf3, 0xb5, 0xf1, 0x8, 0x4e8, 0xa101, 0xcf1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x96, 0xfb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001e00)={0xac, &(0x7f0000000340)={0x0, 0x0, 0x4, "42fc104d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:56 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 18:11:56 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 18:11:56 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:11:56 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x9, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x106}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x4, &(0x7f0000000140)={0x5, 0xf, 0x5}}) 18:11:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 18:11:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 18:11:57 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 1705.083628][T18397] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1705.095634][T11832] usb 4-1: new high-speed USB device number 60 using dummy_hcd 18:11:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 18:11:57 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1705.213663][T10995] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1705.323749][T18397] usb 5-1: Using ep0 maxpacket: 16 [ 1705.344200][T11832] usb 4-1: Using ep0 maxpacket: 32 [ 1705.443991][T18397] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1705.460694][T18397] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1705.470909][T18397] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1705.480753][T18397] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1705.483436][T10995] usb 3-1: Using ep0 maxpacket: 8 [ 1705.489274][T11832] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1705.501685][T11832] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1705.512474][T11832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1705.564215][T18397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1705.573642][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=9 [ 1705.581887][T18397] usb 5-1: SerialNumber: syz [ 1705.613800][T10995] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=cf.1b [ 1705.623190][T10995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.626110][T18397] cdc_ncm 5-1:1.0: skipping garbage [ 1705.634324][T10995] usb 3-1: config 0 descriptor?? [ 1705.637073][T18397] cdc_ncm 5-1:1.0: bind() failure [ 1705.683925][T11832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1705.693200][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.701611][T11832] usb 4-1: Product: syz [ 1705.707102][T11832] usb 4-1: Manufacturer: syz [ 1705.711923][T11832] usb 4-1: SerialNumber: syz [ 1705.854078][T18397] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1705.865952][T18397] usb 5-1: USB disconnect, device number 67 [ 1706.103122][T18397] usb 3-1: USB disconnect, device number 72 [ 1706.214038][T11832] usb 4-1: 0:2 : does not exist [ 1706.234102][T11832] usb 4-1: USB disconnect, device number 60 18:11:58 executing program 2: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902880003010000000904000000010100000824010000000201020524050000090401000001020000090401010101020000072401000000000000000000072501000000000904020000010200000904020101010200000f2402020000000000a58dea5de1ed05240100000210090582090e0200000007250101000000"], 0x0) 18:11:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 18:11:58 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 18:11:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1706.603384][T18397] usb 5-1: new high-speed USB device number 68 using dummy_hcd 18:11:58 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1706.843510][T18397] usb 5-1: Using ep0 maxpacket: 16 [ 1706.953628][T10995] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1706.964074][T18397] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1706.977189][T18397] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1706.987424][T18397] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1706.997869][T18397] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1707.083991][T11832] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1707.091981][T18397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1707.101385][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=9 [ 1707.109741][T18397] usb 5-1: SerialNumber: syz [ 1707.155656][T18397] cdc_ncm 5-1:1.0: skipping garbage [ 1707.161059][T18397] cdc_ncm 5-1:1.0: bind() failure [ 1707.323466][T11832] usb 4-1: Using ep0 maxpacket: 32 [ 1707.353645][T10995] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1707.364142][T10995] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1707.373223][T10995] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1707.373426][T10995] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1707.373506][T10995] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1707.423988][T18397] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1707.436527][T18397] usb 5-1: USB disconnect, device number 68 [ 1707.444271][T11832] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1707.453097][T11832] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1707.463655][T11832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1707.563930][T10995] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1707.573217][T10995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.581600][T10995] usb 3-1: Product: syz [ 1707.586013][T10995] usb 3-1: Manufacturer: syz [ 1707.590714][T10995] usb 3-1: SerialNumber: syz [ 1707.633589][T11832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1707.643019][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.651517][T11832] usb 4-1: Product: syz [ 1707.655914][T11832] usb 4-1: Manufacturer: syz [ 1707.660632][T11832] usb 4-1: SerialNumber: syz 18:11:59 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x49, 0x9e, 0xcd, 0x10, 0x763, 0x1015, 0xd646, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x9, 0xfa, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) 18:11:59 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:11:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[]}}, 0x0) 18:11:59 executing program 0: syz_usb_connect$uac1(0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0) 18:12:00 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1707.913862][T10995] usb 3-1: invalid UAC_HEADER (v1) [ 1707.920049][T10995] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1707.954303][T10995] usb 3-1: USB disconnect, device number 73 [ 1707.993906][T11832] usb 4-1: 0:2 : does not exist 18:12:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[]}}, 0x0) [ 1708.052194][T11832] usb 4-1: USB disconnect, device number 61 18:12:00 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1708.193430][T21992] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1708.443572][T21992] usb 5-1: Using ep0 maxpacket: 16 [ 1708.573887][T21992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1708.585281][T21992] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=d6.46 [ 1708.594684][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.604792][T21992] usb 5-1: config 0 descriptor?? [ 1708.623582][T10995] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1708.847504][T21992] usb 5-1: USB disconnect, device number 69 [ 1708.993516][T10995] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1709.004128][T10995] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1709.013120][T10995] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1709.024594][T10995] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1709.035565][T10995] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1709.203701][T10995] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1709.213075][T10995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.221631][T10995] usb 3-1: Product: syz [ 1709.226374][T10995] usb 3-1: Manufacturer: syz [ 1709.231089][T10995] usb 3-1: SerialNumber: syz [ 1709.553606][T10995] usb 3-1: invalid UAC_HEADER (v1) [ 1709.559527][T10995] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1709.569093][T10995] usb 3-1: USB disconnect, device number 74 [ 1709.613849][ C0] net_ratelimit: 26 callbacks suppressed [ 1709.613864][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1709.626140][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1709.632382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1709.633500][T21992] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1709.638701][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1709.652108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1709.658394][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:12:01 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[]}}, 0x0) 18:12:01 executing program 0: syz_usb_connect$uac1(0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0) 18:12:01 executing program 2: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902880003010000000904000000010100000824010000000201020524050000090401000001020000090401010101020000072401000000000000000000072501000000000904020000010200000904020101010200000f2402020000000000a58dea5de1ed05240100000210090582090e0200000007250101000000"], 0x0) 18:12:01 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1709.665051][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1709.671190][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1709.693911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1709.700162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1709.883665][T21992] usb 5-1: Using ep0 maxpacket: 16 [ 1710.003689][T21992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1710.014972][T21992] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=d6.46 [ 1710.024585][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.033899][T11742] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1710.042489][T21992] usb 5-1: config 0 descriptor?? [ 1710.125489][T10995] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1710.285564][T11742] usb 4-1: Using ep0 maxpacket: 32 [ 1710.297839][T21992] usb 5-1: USB disconnect, device number 70 [ 1710.404019][T11742] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1710.412944][T11742] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1710.423978][T11742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1710.513768][T10995] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1710.524362][T10995] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1710.533558][T10995] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1710.544927][T10995] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1710.555634][T10995] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1710.603732][T11742] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1710.612978][T11742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.621898][T11742] usb 4-1: Product: syz [ 1710.626299][T11742] usb 4-1: Manufacturer: syz [ 1710.630993][T11742] usb 4-1: SerialNumber: syz 18:12:02 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB]}}, 0x0) 18:12:02 executing program 0: syz_usb_connect$uac1(0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0) 18:12:02 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85}}, {{0x9, 0x5, 0x1, 0x3}}]}}]}}]}}, 0x0) [ 1710.763992][T10995] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1710.773868][T10995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.782135][T10995] usb 3-1: Product: syz [ 1710.786625][T10995] usb 3-1: Manufacturer: syz [ 1710.791404][T10995] usb 3-1: SerialNumber: syz 18:12:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB]}}, 0x0) 18:12:03 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1710.964454][T11742] usb 4-1: 0:2 : does not exist [ 1711.003674][T11742] usb 4-1: USB disconnect, device number 62 18:12:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB]}}, 0x0) [ 1711.134291][T10995] usb 3-1: invalid UAC_HEADER (v1) [ 1711.140282][T10995] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1711.156139][T11832] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1711.156481][T10995] usb 3-1: USB disconnect, device number 75 18:12:03 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c"], 0xc7}}, 0x0) 18:12:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c"], 0xc7}}, 0x0) [ 1711.433526][T11832] usb 5-1: Using ep0 maxpacket: 8 18:12:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c"], 0xc7}}, 0x0) [ 1711.553885][T11832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1711.564973][T11832] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 1711.574400][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.584886][T11832] usb 5-1: config 0 descriptor?? 18:12:03 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:03 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 18:12:03 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:12:03 executing program 2: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902880003010000000904000000010100000824010000000201020524050000090401000001020000090401010101020000072401000000000000000000072501000000000904020000010200000904020101010200000f2402020000000000a58dea5de1ed05240100000210090582090e0200000007250101000000"], 0x0) [ 1711.827895][T11742] usb 5-1: USB disconnect, device number 71 [ 1711.943549][T10995] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1711.983536][T11832] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1712.193759][T10995] usb 4-1: Using ep0 maxpacket: 32 [ 1712.333732][T10995] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1712.342606][T10995] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1712.343590][T11832] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1712.352983][T10995] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.363325][T11832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.381358][T11832] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1712.392759][T11832] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1712.403585][T11832] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1712.553998][T10995] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1712.563411][T10995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.571516][T10995] usb 4-1: Product: syz [ 1712.573685][T11832] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1712.576034][T10995] usb 4-1: Manufacturer: syz [ 1712.585262][T11832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.589786][T10995] usb 4-1: SerialNumber: syz [ 1712.597895][T11832] usb 3-1: Product: syz [ 1712.606799][T11832] usb 3-1: Manufacturer: syz [ 1712.611586][T11832] usb 3-1: SerialNumber: syz [ 1712.613488][T11742] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1712.874128][T11742] usb 5-1: Using ep0 maxpacket: 8 [ 1712.914064][T10995] usb 4-1: 0:2 : does not exist [ 1712.940582][T10995] usb 4-1: USB disconnect, device number 63 [ 1712.993743][T11742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1713.005795][T11742] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 1713.015075][T11742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.024713][T11742] usb 5-1: config 0 descriptor?? [ 1713.033945][T11832] usb 3-1: invalid UAC_HEADER (v1) [ 1713.039778][T11832] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1713.050583][T11832] usb 3-1: USB disconnect, device number 76 [ 1713.267411][T11832] usb 5-1: USB disconnect, device number 72 18:12:05 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x64, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:12:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x12a}}, 0x0) 18:12:05 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:05 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 18:12:05 executing program 3: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:05 executing program 2: syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x10, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x63}}, {{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) 18:12:05 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x12a}}, 0x0) 18:12:06 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x12a}}, 0x0) [ 1714.103868][T10995] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1714.117163][T11742] usb 5-1: new high-speed USB device number 73 using dummy_hcd 18:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 18:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) [ 1714.463827][T10995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1714.475926][T10995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 99, setting to 64 [ 1714.487150][T10995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1714.498457][T10995] usb 3-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 1714.507984][T10995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.516927][T11742] usb 5-1: config index 0 descriptor too short (expected 92, got 82) [ 1714.525468][T11742] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 1714.533753][T11742] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 1714.541819][T11742] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1714.552120][T11742] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1714.561428][T11742] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.572604][T11742] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1714.585841][T11742] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1714.595148][T11742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.604782][T10995] usb 3-1: config 0 descriptor?? [ 1714.647739][T10995] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1714.670943][T10995] xpad: probe of 3-1:0.0 failed with error -5 [ 1714.849800][T11832] usb 3-1: USB disconnect, device number 77 [ 1715.623575][T11832] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1715.723759][T11742] cdc_ncm 5-1:1.0: bind() failure [ 1715.733865][T11742] cdc_ncm 5-1:1.1: bind() failure [ 1715.853721][ C0] net_ratelimit: 26 callbacks suppressed [ 1715.853739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.866034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.872459][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.878842][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.885183][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.891975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.898731][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.904877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.926833][T11742] usb 5-1: USB disconnect, device number 73 [ 1715.934042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.940478][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.023680][T11832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1716.035363][T11832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 99, setting to 64 [ 1716.046555][T11832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1716.058130][T11832] usb 3-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 1716.067700][T11832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.077300][T11832] usb 3-1: config 0 descriptor?? [ 1716.118148][T11832] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1716.133831][T11832] xpad: probe of 3-1:0.0 failed with error -5 [ 1716.317106][T11742] usb 3-1: USB disconnect, device number 78 [ 1716.703565][T10995] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1717.063653][T10995] usb 5-1: config index 0 descriptor too short (expected 92, got 82) [ 1717.072335][T10995] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 1717.080623][T10995] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 1717.088789][T10995] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1717.099173][T10995] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1717.108525][T10995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.119622][T10995] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1717.132776][T10995] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1717.143027][T10995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:12:09 executing program 3: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 18:12:09 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 18:12:09 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:09 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e, 0x10c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef, 0x72d0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 18:12:09 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x64, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1717.472186][T10995] cdc_ncm 5-1:1.0: bind() failure [ 1717.504059][T10995] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 1717.524354][T10995] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1717.544631][T10995] usbtest: probe of 5-1:1.1 failed with error -71 18:12:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x175}}, 0x0) [ 1717.563143][T10995] usb 5-1: USB disconnect, device number 74 18:12:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x175}}, 0x0) 18:12:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x175}}, 0x0) [ 1717.773737][T11832] usb 3-1: new high-speed USB device number 79 using dummy_hcd 18:12:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x181}}, 0x0) 18:12:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x181}}, 0x0) [ 1717.933586][T10995] usb 5-1: new high-speed USB device number 75 using dummy_hcd 18:12:10 executing program 3: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede"], 0x181}}, 0x0) 18:12:10 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403"], 0x0) [ 1718.073518][T11832] usb 3-1: device descriptor read/64, error 18 18:12:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x187}}, 0x0) [ 1718.303683][T10995] usb 5-1: config index 0 descriptor too short (expected 92, got 82) [ 1718.311912][T10995] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 1718.320268][T10995] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 1718.328501][T10995] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1718.339063][T10995] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 18:12:10 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1718.348622][T10995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.359785][T10995] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1718.372896][T10995] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1718.382200][T10995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.473559][T11832] usb 3-1: device descriptor read/64, error 18 [ 1718.743633][T11832] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1719.023409][T11832] usb 3-1: device descriptor read/64, error 18 [ 1719.413491][T11832] usb 3-1: device descriptor read/64, error 18 [ 1719.533854][T11832] usb usb3-port1: attempt power cycle [ 1719.553706][T10995] cdc_ncm 5-1:1.0: bind() failure [ 1719.565651][T10995] cdc_ncm 5-1:1.1: bind() failure 18:12:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) [ 1719.764604][T18397] usb 5-1: USB disconnect, device number 75 18:12:12 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1720.243462][T11832] usb 3-1: new high-speed USB device number 81 using dummy_hcd 18:12:12 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa499"], 0x187}}, 0x0) 18:12:12 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:12 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403"], 0x0) 18:12:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x187}}, 0x0) 18:12:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b"], 0x18a}}, 0x0) [ 1720.483536][T11832] usb 3-1: Using ep0 maxpacket: 8 18:12:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x18a}}, 0x0) [ 1720.606111][T11832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.617784][T11832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1720.631166][T11832] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1720.640535][T11832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:12:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b"], 0x18a}}, 0x0) [ 1720.649545][T18397] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1720.671474][T11832] usb 3-1: config 0 descriptor?? 18:12:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) 18:12:12 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) [ 1720.896249][T18397] usb 5-1: Using ep0 maxpacket: 16 [ 1721.014061][T18397] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1721.022519][T18397] usb 5-1: config 0 has no interface number 0 [ 1721.029127][T18397] usb 5-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 1721.038827][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.048821][T18397] usb 5-1: config 0 descriptor?? [ 1721.162122][T11832] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 1721.185477][T11832] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1721.364198][T11832] cp2112 0003:10C4:EA90.0036: error requesting version [ 1721.376020][T11832] cp2112: probe of 0003:10C4:EA90.0036 failed with error -71 [ 1721.387697][T11832] usb 3-1: USB disconnect, device number 81 [ 1721.713699][T18397] f81534 5-1:0.117: f81534_get_register: reg: 1003 failed: -71 [ 1721.721725][T18397] f81534 5-1:0.117: f81534_find_config_idx: read failed: -71 [ 1721.729688][T18397] f81534 5-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 1721.737721][T18397] f81534: probe of 5-1:0.117 failed with error -71 [ 1721.749651][T18397] usb 5-1: USB disconnect, device number 76 [ 1722.093807][ C0] net_ratelimit: 26 callbacks suppressed [ 1722.093827][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.106242][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.112577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.118866][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.126414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.132829][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.133519][T10995] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1722.139346][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.152826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.173948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.180313][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.293536][T11742] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1722.383524][T10995] usb 3-1: Using ep0 maxpacket: 8 [ 1722.503961][T10995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.515315][T10995] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1722.528340][T10995] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1722.537661][T10995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.546440][T11742] usb 5-1: Using ep0 maxpacket: 16 [ 1722.552358][T10995] usb 3-1: config 0 descriptor?? [ 1722.663676][T11742] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1722.672241][T11742] usb 5-1: config 0 has no interface number 0 [ 1722.678722][T11742] usb 5-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 1722.688003][T11742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.697797][T11742] usb 5-1: config 0 descriptor?? 18:12:14 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xef, 0x45, 0x96, 0x10, 0x436, 0x5, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa9, 0x2d, 0x83, 0x0, [], [{{0x9, 0x5, 0xa, 0x1e}}, {{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x52, 0xc0, 0x87, 0x0, 0xe457, 0x1ae7, 0xc78c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4}}]}}]}}, 0x0) [ 1722.913852][T10995] usbhid 3-1:0.0: can't add hid device: -71 [ 1722.920324][T10995] usbhid: probe of 3-1:0.0 failed with error -71 [ 1722.929640][T10995] usb 3-1: USB disconnect, device number 82 18:12:15 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403"], 0x0) 18:12:15 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:15 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xc2, 0x50, 0xf3, 0x8, 0x582, 0x3, 0xf7ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x1, 0x68, 0x33, 0xcb, 0x0, [], [{{0x9, 0x5, 0x1, 0x12, 0x4}}]}}]}}]}}, 0x0) 18:12:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) 18:12:15 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000010005e907004831b886302f1392fe0ed3ee61e1744c56736d816c18b4ac265786cffb5fe583d7da7830cc0fc95a938b34da892002c81dcd4a895bc02cde68e39e747986d5bc18b7c5aae5ce7d37080ea13a3e860e803ebec59da2f5f15feb32407a9c7b25c9af86645d8a1bf21cc2b86b1d72c6dd19787638d8398095ed14b1c7a1b1a2cc77f95956b33408b417e651bed46e222d24a5c4c6ac65c856177514c517721a4b92c890c79bce93d9ba9168019f641fccea14de90c7e95eb7686ac58e82f0b77fe4f955d569242425150f0a3353be895ed8dc635d925efba11767860b6327421b6b31189b5000f1ed69cb2495f1efc99b2ea431d956bbbe8f756571e4d88cbba9c6872a33b58ebf60b4467f59f15abd91ebfc4c29f50eb9fb74edd51103ed5c4a7ee49d3ae90a71c556dd76609d206fdaa13dff44ef76eac18cce9b74e99f6ccb0acba7765ad2ce6ccc7c143a66be8bb574c473fb40a46f3af713fc467410403bbcfe77767e0a733e0e28c3a502ede18c50b7fa49919694b6433"], 0x18c}}, 0x0) 18:12:15 executing program 1: syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "60e533ca"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @feature_unit={0x7, 0x24, 0x6, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1723.203857][T11742] f81534 5-1:0.117: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1723.212519][T11742] f81534 5-1:0.117: f81534_find_config_idx: read failed: -71 [ 1723.220547][T11742] f81534 5-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 1723.228636][T11742] f81534: probe of 5-1:0.117 failed with error -71 [ 1723.255641][T11742] usb 5-1: USB disconnect, device number 77 [ 1723.323785][T10995] usb 3-1: new high-speed USB device number 83 using dummy_hcd 18:12:15 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403000000000600372404060000000000000904010000010200000904010101010200000905010900000000"], 0x0) 18:12:15 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) [ 1723.543560][T21992] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1723.563784][T10995] usb 3-1: Using ep0 maxpacket: 16 [ 1723.633782][T11742] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1723.684089][T10995] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1723.694247][T10995] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1723.704405][T10995] usb 3-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 1723.713888][T10995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.726125][T10995] usb 3-1: config 0 descriptor?? [ 1723.768937][T10995] ums-sddr09 3-1:0.0: USB Mass Storage device detected [ 1723.793230][T10995] scsi host1: usb-storage 3-1:0.0 [ 1723.806225][T21992] usb 2-1: Using ep0 maxpacket: 32 18:12:15 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1723.875518][T11742] usb 5-1: Using ep0 maxpacket: 8 [ 1723.923823][T21992] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1723.934997][T21992] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1723.946430][T28335] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1723.994068][T11742] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1724.002454][T11742] usb 5-1: config 0 has no interface number 0 [ 1724.008969][T11742] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 4 [ 1724.019002][T11742] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1724.028474][T11742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.039949][T11742] usb 5-1: config 0 descriptor?? [ 1724.090703][T11742] usb 5-1: invalid MIDI in EP 0 [ 1724.098607][T11742] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 1724.117188][T21992] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1724.126484][T21992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.134722][T21992] usb 2-1: Product: syz 18:12:16 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403000000000600372404060000000000000904010000010200000904010101010200000905010900000000"], 0x0) [ 1724.139021][T21992] usb 2-1: Manufacturer: syz [ 1724.143911][T21992] usb 2-1: SerialNumber: syz [ 1724.223478][T28335] usb 4-1: device descriptor read/64, error 18 [ 1724.288128][T18397] usb 5-1: USB disconnect, device number 78 18:12:16 executing program 2: syz_usb_connect(0x0, 0xc0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x23, 0xcc, 0x91, 0x8, 0x1a0a, 0x101, 0x2e26, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd, 0x58, 0x4f}}]}}]}}, 0x0) [ 1724.402533][T11742] usb 3-1: USB disconnect, device number 83 [ 1724.524746][T21992] usb 2-1: USB disconnect, device number 41 [ 1724.613801][T28335] usb 4-1: device descriptor read/64, error 18 18:12:16 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:16 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403000000000600372404060000000000000904010000010200000904010101010200000905010900000000"], 0x0) [ 1724.815776][T11742] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1724.893818][T28335] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1725.063792][T18397] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1725.073473][T11742] usb 3-1: Using ep0 maxpacket: 8 [ 1725.163817][T28335] usb 4-1: device descriptor read/64, error 18 [ 1725.195575][T11742] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=2e.26 [ 1725.205047][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.214199][T21992] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1725.222637][T11742] usb 3-1: config 0 descriptor?? [ 1725.313819][T18397] usb 5-1: Using ep0 maxpacket: 8 [ 1725.443899][T18397] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1725.453119][T18397] usb 5-1: config 0 has no interface number 0 [ 1725.453805][T21992] usb 2-1: Using ep0 maxpacket: 32 [ 1725.459875][T18397] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 4 [ 1725.474379][T18397] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1725.483581][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.497609][T11832] usb 3-1: USB disconnect, device number 84 [ 1725.512600][T18397] usb 5-1: config 0 descriptor?? [ 1725.563722][T28335] usb 4-1: device descriptor read/64, error 18 [ 1725.572336][T18397] usb 5-1: invalid MIDI in EP 0 [ 1725.579687][T18397] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 1725.583745][T21992] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1725.597769][T21992] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1725.684411][T28335] usb usb4-port1: attempt power cycle [ 1725.763975][T21992] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1725.773378][T21992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.781456][T21992] usb 2-1: Product: syz [ 1725.781529][T21992] usb 2-1: Manufacturer: syz [ 1725.781605][T21992] usb 2-1: SerialNumber: syz [ 1725.797426][T11832] usb 5-1: USB disconnect, device number 79 18:12:18 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xc2, 0x50, 0xf3, 0x8, 0x582, 0x3, 0xf7ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x1, 0x68, 0x33, 0xcb, 0x0, [], [{{0x9, 0x5, 0x1, 0x12, 0x4}}]}}]}}]}}, 0x0) 18:12:18 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:18 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403000000000600372404060000000000000904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201"], 0x0) 18:12:18 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1726.198138][T21992] usb 2-1: USB disconnect, device number 42 18:12:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x11, 0x95, 0x31, 0x8, 0x4e6, 0x5, 0x10f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1a, 0x99, 0x42, 0x0, [], [{{0x9, 0x5, 0x8a}}]}}]}}]}}, 0x0) [ 1726.285220][T18397] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1726.394108][T28335] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1726.413697][T11832] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1726.543577][T18397] usb 3-1: Using ep0 maxpacket: 8 18:12:18 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403000000000600372404060000000000000904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201"], 0x0) [ 1726.663858][T28335] usb 4-1: device descriptor read/64, error 18 [ 1726.675722][T18397] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=2e.26 [ 1726.685556][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.694630][T11832] usb 5-1: Using ep0 maxpacket: 8 [ 1726.712771][T18397] usb 3-1: config 0 descriptor?? [ 1726.763671][T21992] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1726.815401][T11832] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1726.824036][T11832] usb 5-1: config 0 has no interface number 0 [ 1726.830231][T11832] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 4 [ 1726.840132][T11832] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 1726.849557][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.864058][T11832] usb 5-1: config 0 descriptor?? 18:12:19 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1726.910714][T11832] usb 5-1: invalid MIDI in EP 0 [ 1726.918959][T11832] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 1726.965492][T11832] usb 3-1: USB disconnect, device number 85 [ 1727.004347][T21992] usb 2-1: Using ep0 maxpacket: 8 [ 1727.065319][T28335] usb 4-1: device descriptor read/64, error 18 [ 1727.111968][T18397] usb 5-1: USB disconnect, device number 80 [ 1727.123777][T21992] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 1727.133435][T21992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.147518][T21992] usb 2-1: config 0 descriptor?? [ 1727.187360][T21992] ums-sddr09 2-1:0.0: USB Mass Storage device detected 18:12:19 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a240100000002010209240303000000000009240300000000000013240600000600000000000000000400040000092403000000000600372404060000000000000904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201"], 0x0) [ 1727.343585][T28335] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1727.389210][T21992] usb 2-1: USB disconnect, device number 43 18:12:19 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0xfffffffffffffffd) 18:12:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003e40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x22, {[@main=@item_012={0x2, 0x0, 0x0, "0001"}, @local=@item_4={0x3, 0x2, 0x0, "c4eb48fd"}, @main=@item_4={0x3, 0x0, 0x9, "3fbc98bc"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @main=@item_4={0x3, 0x0, 0x0, "770c1e64"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @local]}}, 0x0}, 0x0) [ 1727.643749][T28335] usb 4-1: device descriptor read/64, error 18 18:12:19 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/159], 0x0) [ 1727.763784][T11742] usb 3-1: new high-speed USB device number 86 using dummy_hcd 18:12:19 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1727.943598][T21992] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1728.003484][T11742] usb 3-1: Using ep0 maxpacket: 16 [ 1728.033387][T28335] usb 4-1: device descriptor read/64, error 18 [ 1728.123617][T11742] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1728.154933][T28335] usb usb4-port1: unable to enumerate USB device [ 1728.164013][T10995] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1728.184495][T11742] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1728.192301][T11742] usb 3-1: can't read configurations, error -71 [ 1728.199199][T21992] usb 5-1: Using ep0 maxpacket: 16 18:12:20 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) [ 1728.323777][T21992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.335320][T21992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1728.343951][ C0] net_ratelimit: 26 callbacks suppressed [ 1728.343973][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1728.348383][T21992] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1728.354413][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1728.359910][T21992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.369651][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1728.383730][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1728.395507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1728.401695][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1728.409360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1728.414012][ C1] protocol 88fb is buggy, dev hsr_slave_0 18:12:20 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/159], 0x0) [ 1728.415879][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1728.421657][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1728.434604][T10995] usb 2-1: Using ep0 maxpacket: 8 [ 1728.441061][T21992] usb 5-1: config 0 descriptor?? [ 1728.554648][T10995] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 1728.564135][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.574428][T10995] usb 2-1: config 0 descriptor?? [ 1728.618211][T10995] ums-sddr09 2-1:0.0: USB Mass Storage device detected [ 1728.663590][T28335] usb 4-1: new high-speed USB device number 68 using dummy_hcd 18:12:20 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1728.817170][T10995] usb 2-1: USB disconnect, device number 44 [ 1728.903707][T11742] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1728.927946][T21992] hid-generic 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 1728.935932][T21992] hid-generic 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 1728.944885][T28335] usb 4-1: device descriptor read/64, error 18 [ 1728.961009][T21992] hid-generic 0003:0D8C:0022.0037: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 18:12:21 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/159], 0x0) [ 1729.128601][T18397] usb 5-1: USB disconnect, device number 81 [ 1729.153635][T11742] usb 3-1: Using ep0 maxpacket: 16 [ 1729.273718][T11742] usb 3-1: unable to get BOS descriptor or descriptor too short 18:12:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xab}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x15, &(0x7f0000000340)=@string={0x15, 0x3, "a1634517acca12e07b4c6db66cade6d04c24a9"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xab}}, &(0x7f0000000b40)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1729.333769][T28335] usb 4-1: device descriptor read/64, error 18 [ 1729.340845][T11742] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1729.348856][T11742] usb 3-1: can't read configurations, error -71 [ 1729.362120][T11742] usb usb3-port1: attempt power cycle 18:12:21 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:21 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/164], 0x0) [ 1729.605216][T28335] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1729.663617][T10995] usb 2-1: new high-speed USB device number 45 using dummy_hcd 18:12:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc9, 0x90, 0x4f, 0x8, 0x4bb, 0x930, 0xd24a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0x4, 0xe8}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0xac, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x6}}) syz_usb_control_io(r0, 0x0, 0x0) [ 1729.873549][T28335] usb 4-1: device descriptor read/64, error 18 [ 1729.913534][T18397] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1729.913644][T10995] usb 2-1: Using ep0 maxpacket: 16 [ 1730.053736][T10995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.065287][T10995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1730.078584][T10995] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 1730.087884][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.097219][T11742] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1730.105880][T10995] usb 2-1: config 0 descriptor?? [ 1730.163490][T18397] usb 5-1: Using ep0 maxpacket: 16 18:12:22 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/164], 0x0) [ 1730.285435][T28335] usb 4-1: device descriptor read/64, error 18 [ 1730.323718][T18397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.335160][T18397] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1730.343908][T11742] usb 3-1: Using ep0 maxpacket: 8 [ 1730.349247][T18397] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1730.363545][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.374819][T18397] usb 5-1: config 0 descriptor?? [ 1730.403991][T28335] usb usb4-port1: attempt power cycle [ 1730.476880][T11742] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 1730.486671][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.505415][T11742] usb 3-1: config 0 descriptor?? [ 1730.606673][T10995] hid (null): bogus close delimiter [ 1730.629388][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.637017][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x2 [ 1730.645703][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.652903][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.660513][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.667849][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.675175][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.682284][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.689583][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.698117][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.705430][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.712638][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.719963][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.727293][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.734598][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.741849][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.749236][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.756530][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.763800][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.763948][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.764094][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.778218][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.793008][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.800439][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.807760][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.815714][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.815891][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.830401][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.830546][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.844990][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.852348][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.859807][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.867080][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.874364][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.882307][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.889683][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.896961][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.899423][T18397] usbhid 5-1:0.0: can't add hid device: -71 [ 1730.904226][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.910226][T18397] usbhid: probe of 5-1:0.0 failed with error -71 [ 1730.917326][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.931127][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.938455][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.946180][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.953499][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.960781][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.968067][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.975460][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.984490][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.991725][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1730.999054][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.006598][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.014040][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.021271][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.028614][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.036177][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.037460][T18397] usb 5-1: USB disconnect, device number 82 [ 1731.043490][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.043660][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0x0 [ 1731.065066][T10995] waltop 0003:172F:0034.0038: unknown main item tag 0xd [ 1731.072489][T10995] waltop 0003:172F:0034.0038: bogus close delimiter 18:12:23 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xffff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:12:23 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:23 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:23 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/164], 0x0) [ 1731.079513][T10995] waltop 0003:172F:0034.0038: item 0 1 2 10 parsing failed [ 1731.087813][T10995] waltop: probe of 0003:172F:0034.0038 failed with error -22 [ 1731.121702][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1731.155960][T10995] usb 2-1: USB disconnect, device number 45 [ 1731.483588][T28335] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1731.623631][T18397] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1731.653752][T10995] usb 2-1: new high-speed USB device number 46 using dummy_hcd 18:12:23 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/167], 0x0) [ 1731.733650][T28335] usb 4-1: Using ep0 maxpacket: 32 [ 1731.775920][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1731.787253][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1731.863486][T18397] usb 5-1: Using ep0 maxpacket: 32 [ 1731.863882][T28335] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1731.878090][T28335] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1731.889326][T28335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1731.953564][T10995] usb 2-1: Using ep0 maxpacket: 16 [ 1731.970024][T11742] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, fe:35:fa:2f:61:f6 [ 1731.991902][T11742] usb 3-1: USB disconnect, device number 88 18:12:24 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1731.999025][T11742] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 1732.004134][T18397] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1732.018249][T18397] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1732.104208][T10995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.116141][T10995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1732.130191][T10995] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 1732.140317][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.149660][T28335] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1732.159833][T28335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.168693][T28335] usb 4-1: Product: syz [ 1732.173200][T28335] usb 4-1: Manufacturer: syz [ 1732.178398][T28335] usb 4-1: SerialNumber: syz [ 1732.202070][T10995] usb 2-1: config 0 descriptor?? [ 1732.209810][T18397] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1732.219509][T18397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.228504][T18397] usb 5-1: Product: syz [ 1732.233676][T18397] usb 5-1: Manufacturer: syz [ 1732.238722][T18397] usb 5-1: SerialNumber: syz 18:12:24 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/167], 0x0) 18:12:24 executing program 1: syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "34477d31c2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x5f, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1732.544550][T28335] usb 4-1: 0:2 : does not exist [ 1732.621896][T28335] usb 4-1: USB disconnect, device number 70 [ 1732.630252][T10995] usbhid 2-1:0.0: can't add hid device: -71 [ 1732.636844][T10995] usbhid: probe of 2-1:0.0 failed with error -71 [ 1732.653652][T11742] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1732.654314][T18397] usb 5-1: 0:2 : does not exist [ 1732.684729][T10995] usb 2-1: USB disconnect, device number 46 [ 1732.743038][T18397] usb 5-1: USB disconnect, device number 83 [ 1732.893649][T11742] usb 3-1: Using ep0 maxpacket: 8 18:12:25 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) 18:12:25 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/167], 0x0) [ 1733.024332][T11742] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 1733.034512][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.121440][T11742] usb 3-1: config 0 descriptor?? [ 1733.128405][T10995] usb 2-1: new full-speed USB device number 47 using dummy_hcd 18:12:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc9, 0x90, 0x4f, 0x8, 0x4bb, 0x930, 0xd24a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0x4, 0xe8}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0xac, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x6}}) syz_usb_control_io(r0, 0x0, 0x0) 18:12:25 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) [ 1733.384503][T18397] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1733.384810][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1733.404247][T11742] asix: probe of 3-1:0.0 failed with error -71 [ 1733.504489][T11742] usb 3-1: USB disconnect, device number 89 [ 1733.563768][T10995] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1733.573595][T10995] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1733.585297][T10995] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1733.623636][T18397] usb 5-1: Using ep0 maxpacket: 32 [ 1733.744186][T18397] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1733.753658][T18397] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1733.774167][T28335] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1733.816237][T10995] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1733.826017][T10995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.835200][T10995] usb 2-1: Product: syz [ 1733.839519][T10995] usb 2-1: Manufacturer: syz [ 1733.844739][T10995] usb 2-1: SerialNumber: syz [ 1733.923957][T18397] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1733.925689][T11742] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1733.933772][T18397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.950337][T18397] usb 5-1: Product: syz [ 1733.954721][T18397] usb 5-1: Manufacturer: syz [ 1733.959440][T18397] usb 5-1: SerialNumber: syz [ 1734.083678][T28335] usb 4-1: Using ep0 maxpacket: 32 [ 1734.180307][T10995] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1734.189562][T10995] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1734.197798][T10995] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1734.204635][T11742] usb 3-1: Using ep0 maxpacket: 8 [ 1734.252401][T28335] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1734.261840][T28335] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1734.272668][T28335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 18:12:26 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2c, 0xcc, 0xb1, 0x20, 0x644, 0x8021, 0x8de6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xac, 0x57, 0x97}}]}}]}}, 0x0) 18:12:26 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/168], 0x0) 18:12:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1734.301436][T10995] usb 2-1: USB disconnect, device number 47 [ 1734.334111][T18397] usb 5-1: 0:2 : does not exist [ 1734.363903][T11742] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 1734.373956][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.407433][T18397] usb 5-1: USB disconnect, device number 84 [ 1734.449503][T11742] usb 3-1: config 0 descriptor?? [ 1734.463832][T28335] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1734.474287][T28335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.482619][T28335] usb 4-1: Product: syz [ 1734.487302][T28335] usb 4-1: Manufacturer: syz [ 1734.492109][T28335] usb 4-1: SerialNumber: syz 18:12:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1734.574069][ C0] net_ratelimit: 26 callbacks suppressed [ 1734.574094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.588054][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.595401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.602068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.609047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.616800][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.653955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.654065][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.660457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.666836][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:12:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 1734.724644][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 18:12:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) [ 1734.865002][T28335] usb 4-1: 0:2 : does not exist [ 1734.903139][T28335] usb 4-1: USB disconnect, device number 71 18:12:27 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) [ 1734.983636][T18397] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1735.013789][T10995] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1735.223669][T18397] usb 5-1: Using ep0 maxpacket: 32 [ 1735.364004][T18397] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1735.364351][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1735.372446][T18397] usb 5-1: config 0 has no interface number 0 [ 1735.382975][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1735.389156][T18397] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=8d.e6 [ 1735.400199][T10995] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1735.409348][T18397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.418564][T10995] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1735.429888][T18397] usb 5-1: config 0 descriptor?? [ 1735.438321][T10995] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1735.513505][T18397] snd-usb-audio: probe of 5-1:0.1 failed with error -22 [ 1735.521507][T18397] usb 5-1: selecting invalid altsetting 1 [ 1735.527522][T18397] usb_set_interface error [ 1735.532534][T18397] snd-usb-us122l: probe of 5-1:0.1 failed with error -22 [ 1735.569142][T11742] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 36:60:4d:09:2d:7a [ 1735.594031][T10995] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1735.603653][T10995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.611898][T10995] usb 2-1: Product: syz 18:12:27 executing program 1: syz_usb_connect(0x0, 0x3e, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xcb, 0x31, 0x95, 0x8, 0x499, 0x1041, 0x24d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xde, 0xcd, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) [ 1735.616442][T10995] usb 2-1: Manufacturer: syz [ 1735.621402][T10995] usb 2-1: SerialNumber: syz [ 1735.644284][T11742] usb 3-1: USB disconnect, device number 90 [ 1735.650993][T11742] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet 18:12:27 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/168], 0x0) 18:12:27 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) [ 1735.711648][T10995] usb 2-1: can't set config #1, error -71 [ 1735.718550][T18397] usb 5-1: USB disconnect, device number 85 [ 1735.748030][T10995] usb 2-1: USB disconnect, device number 48 18:12:28 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1b}}}, 0x0) 18:12:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc9, 0x90, 0x4f, 0x8, 0x4bb, 0x930, 0xd24a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0x4, 0xe8}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0xac, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x6}}) syz_usb_control_io(r0, 0x0, 0x0) [ 1736.123946][T10995] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1736.263891][T18397] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1736.294146][T11742] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1736.364242][T10995] usb 2-1: Using ep0 maxpacket: 8 [ 1736.483859][T10995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1736.495529][T10995] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1736.506008][T10995] usb 2-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice=24.d1 [ 1736.513650][T11832] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1736.515399][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.525883][T18397] usb 4-1: Using ep0 maxpacket: 32 [ 1736.573785][T11742] usb 3-1: Using ep0 maxpacket: 8 [ 1736.600139][T10995] usb 2-1: config 0 descriptor?? [ 1736.651709][T10995] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1736.690464][T18397] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1736.699865][T18397] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1736.704118][T11742] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 1736.711000][T18397] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1736.720070][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.784042][T11832] usb 5-1: Using ep0 maxpacket: 32 [ 1736.806160][T11742] usb 3-1: config 0 descriptor?? [ 1736.854393][T10995] usb 2-1: USB disconnect, device number 49 [ 1736.945997][T18397] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1736.956203][T18397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.964498][T18397] usb 4-1: Product: syz [ 1736.968781][T18397] usb 4-1: Manufacturer: syz [ 1736.973742][T18397] usb 4-1: SerialNumber: syz [ 1736.979527][T11832] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1736.987840][T11832] usb 5-1: config 0 has no interface number 0 [ 1736.994576][T11832] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=8d.e6 [ 1737.004191][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.024847][T11832] usb 5-1: config 0 descriptor?? [ 1737.064189][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1737.373861][T18397] usb 4-1: 0:2 : does not exist [ 1737.393603][T11832] snd-usb-audio: probe of 5-1:0.1 failed with error -22 [ 1737.401501][T11832] usb 5-1: selecting invalid altsetting 1 [ 1737.412769][T11832] usb_set_interface error [ 1737.418081][T11832] snd-usb-us122l: probe of 5-1:0.1 failed with error -22 [ 1737.443675][T18397] usb 4-1: USB disconnect, device number 72 18:12:29 executing program 4: syz_usb_connect$uac1(0x0, 0x4f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "7f0230f14ae45d843877328d6c633acf"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x46, &(0x7f0000000240)=@string={0x46, 0x3, "edfd3b2dabf4f38674fcba0d09c09ad3b14c9cee501134bbadf6adf7aa8099f7a8cc16a2438825ad9978ef32e81f9b3b9f6104056c882aab55b88e2486d7e6afeda76ade"}}]}) 18:12:29 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 18:12:29 executing program 0: syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902970003010000000904000000010100000a2401000000020102092403030000000000092403000000000000132406000006000000000000000004000400000924030000000006003724040600000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010100"/168], 0x0) [ 1737.470348][T11832] usb 5-1: USB disconnect, device number 86 18:12:29 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 18:12:29 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) [ 1737.643749][ T4884] usb 2-1: new high-speed USB device number 50 using dummy_hcd 18:12:29 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x0, 0x0) [ 1737.704441][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1737.715247][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 18:12:29 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1737.893748][ T4884] usb 2-1: Using ep0 maxpacket: 8 [ 1737.899647][T11742] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, c6:8f:9b:e0:ec:00 [ 1737.915232][T11742] usb 3-1: USB disconnect, device number 91 [ 1737.924310][T11742] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 1737.945933][T11832] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1738.025704][ T4884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1738.037194][ T4884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1738.047657][ T4884] usb 2-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice=24.d1 [ 1738.058308][ T4884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.133801][T18397] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1738.173963][ T4884] usb 2-1: config 0 descriptor?? [ 1738.205326][T11832] usb 5-1: Using ep0 maxpacket: 32 [ 1738.223634][ T4884] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1738.375930][T18397] usb 4-1: Using ep0 maxpacket: 32 [ 1738.404640][T11832] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1738.414179][T11832] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1738.424808][T11832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1738.447358][ T4884] usb 2-1: USB disconnect, device number 50 [ 1738.517192][T18397] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1738.526532][T18397] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1738.537509][T18397] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1738.674412][T11832] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1738.684531][T11832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.694656][T11832] usb 5-1: Product: syz [ 1738.699218][T11832] usb 5-1: Manufacturer: ﷭ⴻ蛳ﱴය쀉펚䲱ᅐ무肪첨ꈖ衃괥碙㋯Ῠ㮛憟Ԅ衬ꬪ롕⒎힆꿦꟭ [ 1738.714499][T11832] usb 5-1: SerialNumber: syz [ 1738.753936][T18397] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1738.764050][T18397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.772347][T18397] usb 4-1: Product: syz [ 1738.777912][T18397] usb 4-1: Manufacturer: syz [ 1738.782709][T18397] usb 4-1: SerialNumber: syz 18:12:30 executing program 1: syz_usb_connect(0x0, 0x3e, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xcb, 0x31, 0x95, 0x8, 0x499, 0x1041, 0x24d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xde, 0xcd, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) 18:12:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc9, 0x90, 0x4f, 0x8, 0x4bb, 0x930, 0xd24a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0x4, 0xe8}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0xac, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x6}}) syz_usb_control_io(r0, 0x0, 0x0) 18:12:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0xac, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:12:30 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x0, 0x0) [ 1739.153673][T11742] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1739.193934][ T4884] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1739.202716][T11832] usb 5-1: 0:2 : does not exist [ 1739.227239][T11832] usb 5-1: USB disconnect, device number 87 [ 1739.235976][T26930] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1739.334569][T18397] usb 4-1: 0:2 : does not exist [ 1739.393541][T11742] usb 3-1: Using ep0 maxpacket: 8 [ 1739.405018][T18397] usb 4-1: USB disconnect, device number 73 [ 1739.503987][T26930] usb 2-1: Using ep0 maxpacket: 8 [ 1739.514113][T11742] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 1739.523920][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.554624][ T4884] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1739.555162][T11742] usb 3-1: config 0 descriptor?? [ 1739.564839][ T4884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.664031][T26930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1739.676178][T26930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1739.686475][T26930] usb 2-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice=24.d1 [ 1739.696209][T26930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.715123][ T4884] usb 1-1: config 0 descriptor?? [ 1739.746889][T26930] usb 2-1: config 0 descriptor?? [ 1739.796789][T26930] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1739.824217][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 18:12:31 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x0, 0x0) [ 1739.907606][T10995] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1739.996089][ T4884] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1740.050507][T26930] usb 2-1: USB disconnect, device number 51 [ 1740.153490][T10995] usb 5-1: Using ep0 maxpacket: 32 [ 1740.353722][T10995] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1740.363099][T10995] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1740.374019][T10995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1740.464323][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1740.476808][T11742] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1740.573713][T10995] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1740.584102][T10995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.602062][T10995] usb 5-1: Product: syz [ 1740.606820][T10995] usb 5-1: Manufacturer: ﷭ⴻ蛳ﱴය쀉펚䲱ᅐ무肪첨ꈖ衃괥碙㋯Ῠ㮛憟Ԅ衬ꬪ롕⒎힆꿦꟭ [ 1740.621820][T10995] usb 5-1: SerialNumber: syz 18:12:32 executing program 4: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000001540)=':') 18:12:32 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 18:12:32 executing program 1: syz_usb_connect(0x0, 0x3e, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xcb, 0x31, 0x95, 0x8, 0x499, 0x1041, 0x24d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xde, 0xcd, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) [ 1740.671789][T11742] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 6a:c1:c4:6c:a7:a8 [ 1740.735035][T11742] usb 3-1: USB disconnect, device number 92 [ 1740.742081][T11742] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 1740.787514][T10995] usb 5-1: can't set config #1, error -71 [ 1740.814150][ C0] net_ratelimit: 26 callbacks suppressed [ 1740.814174][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.827533][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.834255][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.836884][T10995] usb 5-1: USB disconnect, device number 88 [ 1740.840471][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.853879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.860283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.867126][T14213] ===================================================== [ 1740.874712][T14213] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0xa9/0xb0 [ 1740.876196][T14213] CPU: 0 PID: 14213 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 1740.876196][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.893802][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.876196][T14213] Call Trace: [ 1740.876196][T14213] dump_stack+0x191/0x1f0 [ 1740.876196][T14213] kmsan_report+0x14a/0x2f0 [ 1740.876196][T14213] kmsan_internal_check_memory+0x187/0x4e0 [ 1740.876196][T14213] ? kmsan_get_metadata+0x39/0x350 [ 1740.876196][T14213] kmsan_copy_to_user+0xa9/0xb0 [ 1740.876196][T14213] _copy_to_user+0x16b/0x1f0 [ 1740.876196][T14213] fuzzer_ioctl+0x25a9/0x5860 [ 1740.876196][T14213] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1740.876196][T14213] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1740.876196][T14213] ? next_event+0x6a0/0x6a0 [ 1740.910770][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.876196][T14213] full_proxy_unlocked_ioctl+0x222/0x330 [ 1740.876196][T14213] ? full_proxy_poll+0x2d0/0x2d0 [ 1740.876196][T14213] do_vfs_ioctl+0xea8/0x2c50 [ 1740.876196][T14213] ? security_file_ioctl+0x1bd/0x200 [ 1740.876196][T14213] __se_sys_ioctl+0x1da/0x270 [ 1740.876196][T14213] __x64_sys_ioctl+0x4a/0x70 [ 1740.876196][T14213] do_syscall_64+0xb6/0x160 [ 1740.876196][T14213] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1740.876196][T14213] RIP: 0033:0x459d67 [ 1740.876196][T14213] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1740.919035][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.876196][T14213] RSP: 002b:00007fb5eaa3e3c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.876196][T14213] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459d67 [ 1740.876196][T14213] RDX: 00007fb5eaa3e810 RSI: 0000000080085502 RDI: 0000000000000003 [ 1740.876196][T14213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1740.876196][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1740.876196][T14213] R13: 00000000004bf715 R14: 00000000004e1238 R15: 00000000ffffffff [ 1740.876196][T14213] [ 1740.876196][T14213] Uninit was stored to memory at: [ 1740.876196][T14213] kmsan_internal_chain_origin+0xbd/0x170 [ 1740.876196][T14213] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 1740.876196][T14213] kmsan_memcpy_metadata+0xb/0x10 [ 1740.876196][T14213] __msan_memcpy+0x56/0x70 [ 1740.876196][T14213] gadget_setup+0x498/0xb60 [ 1740.930079][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.876196][T14213] dummy_timer+0x1fba/0x6770 [ 1740.876196][T14213] call_timer_fn+0x232/0x530 [ 1740.876196][T14213] __run_timers+0xd60/0x1270 [ 1740.876196][T14213] run_timer_softirq+0x2d/0x50 [ 1740.876196][T14213] __do_softirq+0x4a1/0x83a [ 1740.876196][T14213] irq_exit+0x230/0x280 [ 1740.876196][T14213] exiting_irq+0xe/0x10 [ 1740.876196][T14213] smp_apic_timer_interrupt+0x48/0x70 [ 1740.876196][T14213] apic_timer_interrupt+0x2e/0x40 [ 1740.876196][T14213] finish_lock_switch+0x2b/0x40 [ 1740.876196][T14213] finish_task_switch+0xfa/0x2d0 [ 1740.876196][T14213] __schedule+0x71b/0x800 [ 1740.876196][T14213] schedule+0x19b/0x2d0 [ 1740.876196][T14213] do_nanosleep+0x25e/0x940 [ 1741.063644][T21992] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1741.054359][T14213] __se_sys_nanosleep+0x725/0x940 [ 1741.054359][T14213] __x64_sys_nanosleep+0x3e/0x60 [ 1741.054359][T14213] do_syscall_64+0xb6/0x160 [ 1741.054359][T14213] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1741.054359][T14213] [ 1741.054359][T14213] Uninit was stored to memory at: [ 1741.054359][T14213] kmsan_internal_chain_origin+0xbd/0x170 [ 1741.054359][T14213] __msan_chain_origin+0x6b/0xe0 [ 1741.054359][T14213] dummy_timer+0x2d76/0x6770 [ 1741.054359][T14213] call_timer_fn+0x232/0x530 [ 1741.054359][T14213] __run_timers+0xd60/0x1270 [ 1741.054359][T14213] run_timer_softirq+0x2d/0x50 [ 1741.054359][T14213] __do_softirq+0x4a1/0x83a [ 1741.054359][T14213] irq_exit+0x230/0x280 [ 1741.054359][T14213] exiting_irq+0xe/0x10 [ 1741.054359][T14213] smp_apic_timer_interrupt+0x48/0x70 [ 1741.054359][T14213] apic_timer_interrupt+0x2e/0x40 [ 1741.054359][T14213] finish_lock_switch+0x2b/0x40 [ 1741.054359][T14213] finish_task_switch+0xfa/0x2d0 [ 1741.054359][T14213] __schedule+0x71b/0x800 [ 1741.054359][T14213] schedule+0x19b/0x2d0 [ 1741.054359][T14213] do_nanosleep+0x25e/0x940 [ 1741.054359][T14213] __se_sys_nanosleep+0x725/0x940 [ 1741.054359][T14213] __x64_sys_nanosleep+0x3e/0x60 [ 1741.054359][T14213] do_syscall_64+0xb6/0x160 [ 1741.054359][T14213] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1741.054359][T14213] [ 1741.054359][T14213] Uninit was stored to memory at: [ 1741.054359][T14213] kmsan_internal_chain_origin+0xbd/0x170 [ 1741.054359][T14213] __msan_chain_origin+0x6b/0xe0 [ 1741.054359][T14213] usb_control_msg+0x61b/0x7f0 [ 1741.054359][T14213] usbnet_write_cmd+0x386/0x430 [ 1741.054359][T14213] asix_write_cmd+0x155/0x270 [ 1741.054359][T14213] ax88772a_hw_reset+0x1ab/0x1030 [ 1741.054359][T14213] ax88772_bind+0x67a/0x11f0 [ 1741.054359][T14213] usbnet_probe+0x10d3/0x39d0 [ 1741.054359][T14213] usb_probe_interface+0xd19/0x1310 [ 1741.054359][T14213] really_probe+0xd91/0x1f90 [ 1741.054359][T14213] driver_probe_device+0x1ba/0x510 [ 1741.054359][T14213] __device_attach_driver+0x5b8/0x790 [ 1741.054359][T14213] bus_for_each_drv+0x28e/0x3b0 [ 1741.054359][T14213] __device_attach+0x489/0x750 [ 1741.054359][T14213] device_initial_probe+0x4a/0x60 [ 1741.054359][T14213] bus_probe_device+0x131/0x390 [ 1741.054359][T14213] device_add+0x25b5/0x2df0 [ 1741.054359][T14213] usb_set_configuration+0x309f/0x3710 [ 1741.054359][T14213] generic_probe+0xe7/0x280 [ 1741.054359][T14213] usb_probe_device+0x146/0x200 [ 1741.054359][T14213] really_probe+0xd91/0x1f90 [ 1741.054359][T14213] driver_probe_device+0x1ba/0x510 [ 1741.054359][T14213] __device_attach_driver+0x5b8/0x790 [ 1741.054359][T14213] bus_for_each_drv+0x28e/0x3b0 [ 1741.054359][T14213] __device_attach+0x489/0x750 [ 1741.054359][T14213] device_initial_probe+0x4a/0x60 [ 1741.054359][T14213] bus_probe_device+0x131/0x390 [ 1741.054359][T14213] device_add+0x25b5/0x2df0 [ 1741.054359][T14213] usb_new_device+0x23e5/0x2fb0 [ 1741.054359][T14213] hub_event+0x581d/0x72f0 [ 1741.054359][T14213] process_one_work+0x1572/0x1ef0 [ 1741.054359][T14213] worker_thread+0x111b/0x2460 [ 1741.054359][T14213] kthread+0x4b5/0x4f0 [ 1741.054359][T14213] ret_from_fork+0x35/0x40 [ 1741.054359][T14213] [ 1741.054359][T14213] Uninit was stored to memory at: [ 1741.054359][T14213] kmsan_internal_chain_origin+0xbd/0x170 [ 1741.054359][T14213] __msan_chain_origin+0x6b/0xe0 [ 1741.054359][T14213] ax88772_bind+0xa12/0x11f0 [ 1741.054359][T14213] usbnet_probe+0x10d3/0x39d0 [ 1741.054359][T14213] usb_probe_interface+0xd19/0x1310 [ 1741.054359][T14213] really_probe+0xd91/0x1f90 [ 1741.054359][T14213] driver_probe_device+0x1ba/0x510 [ 1741.054359][T14213] __device_attach_driver+0x5b8/0x790 [ 1741.054359][T14213] bus_for_each_drv+0x28e/0x3b0 [ 1741.054359][T14213] __device_attach+0x489/0x750 [ 1741.054359][T14213] device_initial_probe+0x4a/0x60 [ 1741.054359][T14213] bus_probe_device+0x131/0x390 [ 1741.054359][T14213] device_add+0x25b5/0x2df0 [ 1741.054359][T14213] usb_set_configuration+0x309f/0x3710 [ 1741.054359][T14213] generic_probe+0xe7/0x280 [ 1741.054359][T14213] usb_probe_device+0x146/0x200 [ 1741.054359][T14213] really_probe+0xd91/0x1f90 [ 1741.054359][T14213] driver_probe_device+0x1ba/0x510 [ 1741.054359][T14213] __device_attach_driver+0x5b8/0x790 [ 1741.054359][T14213] bus_for_each_drv+0x28e/0x3b0 [ 1741.054359][T14213] __device_attach+0x489/0x750 [ 1741.054359][T14213] device_initial_probe+0x4a/0x60 [ 1741.054359][T14213] bus_probe_device+0x131/0x390 [ 1741.054359][T14213] device_add+0x25b5/0x2df0 [ 1741.054359][T14213] usb_new_device+0x23e5/0x2fb0 [ 1741.054359][T14213] hub_event+0x581d/0x72f0 [ 1741.054359][T14213] process_one_work+0x1572/0x1ef0 [ 1741.054359][T14213] worker_thread+0x111b/0x2460 [ 1741.054359][T14213] kthread+0x4b5/0x4f0 [ 1741.054359][T14213] ret_from_fork+0x35/0x40 [ 1741.054359][T14213] [ 1741.054359][T14213] Local variable description: ----buf.i@asix_get_phy_addr [ 1741.054359][T14213] Variable was created at: [ 1741.054359][T14213] asix_get_phy_addr+0x4d/0x280 [ 1741.054359][T14213] asix_get_phy_addr+0x4d/0x280 [ 1741.054359][T14213] [ 1741.054359][T14213] Byte 10 of 16 is uninitialized [ 1741.054359][T14213] Memory access of size 16 starts at ffff88809cd5b2d0 [ 1741.054359][T14213] Data copied to user address 00007fb5eaa3e810 [ 1741.054359][T14213] ===================================================== [ 1741.054359][T14213] Disabling lock debugging due to kernel taint [ 1741.054359][T14213] Kernel panic - not syncing: panic_on_warn set ... [ 1741.054359][T14213] CPU: 0 PID: 14213 Comm: syz-executor.0 Tainted: G B 5.4.0-rc3+ #0 [ 1741.054359][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.054359][T14213] Call Trace: [ 1741.054359][T14213] dump_stack+0x191/0x1f0 [ 1741.054359][T14213] panic+0x3c9/0xc1e [ 1741.054359][T14213] kmsan_report+0x2e8/0x2f0 [ 1741.054359][T14213] kmsan_internal_check_memory+0x187/0x4e0 [ 1741.054359][T14213] ? kmsan_get_metadata+0x39/0x350 [ 1741.054359][T14213] kmsan_copy_to_user+0xa9/0xb0 [ 1741.054359][T14213] _copy_to_user+0x16b/0x1f0 [ 1741.054359][T14213] fuzzer_ioctl+0x25a9/0x5860 [ 1741.054359][T14213] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1741.054359][T14213] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1741.054359][T14213] ? next_event+0x6a0/0x6a0 [ 1741.054359][T14213] full_proxy_unlocked_ioctl+0x222/0x330 [ 1741.054359][T14213] ? full_proxy_poll+0x2d0/0x2d0 [ 1741.054359][T14213] do_vfs_ioctl+0xea8/0x2c50 [ 1741.054359][T14213] ? security_file_ioctl+0x1bd/0x200 [ 1741.054359][T14213] __se_sys_ioctl+0x1da/0x270 [ 1741.054359][T14213] __x64_sys_ioctl+0x4a/0x70 [ 1741.054359][T14213] do_syscall_64+0xb6/0x160 [ 1741.054359][T14213] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1741.054359][T14213] RIP: 0033:0x459d67 [ 1741.054359][T14213] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1741.054359][T14213] RSP: 002b:00007fb5eaa3e3c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.054359][T14213] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459d67 [ 1741.054359][T14213] RDX: 00007fb5eaa3e810 RSI: 0000000080085502 RDI: 0000000000000003 [ 1741.054359][T14213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1741.054359][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1741.054359][T14213] R13: 00000000004bf715 R14: 00000000004e1238 R15: 00000000ffffffff [ 1741.054359][T14213] Kernel Offset: disabled [ 1741.054359][T14213] Rebooting in 86400 seconds..