[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 78.438723][ T32] audit: type=1800 audit(1569667981.490:25): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 78.462049][ T32] audit: type=1800 audit(1569667981.510:26): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 78.508130][ T32] audit: type=1800 audit(1569667981.540:27): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. 2019/09/28 10:53:15 fuzzer started 2019/09/28 10:53:19 dialing manager at 10.128.0.26:38529 2019/09/28 10:53:20 syscalls: 2385 2019/09/28 10:53:20 code coverage: enabled 2019/09/28 10:53:20 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/28 10:53:20 extra coverage: enabled 2019/09/28 10:53:20 setuid sandbox: enabled 2019/09/28 10:53:20 namespace sandbox: enabled 2019/09/28 10:53:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/28 10:53:20 fault injection: enabled 2019/09/28 10:53:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/28 10:53:20 net packet injection: enabled 2019/09/28 10:53:20 net device setup: enabled 10:56:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000001640)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002900)=[@flowinfo={{0x14}}], 0xf}, 0x0) syzkaller login: [ 270.755905][T11782] IPVS: ftp: loaded support on port[0] = 21 [ 270.891444][T11782] chnl_net:caif_netlink_parms(): no params data found [ 270.945843][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.953121][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.961866][T11782] device bridge_slave_0 entered promiscuous mode [ 270.972157][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.979340][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.988072][T11782] device bridge_slave_1 entered promiscuous mode [ 271.019685][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.032375][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.063647][T11782] team0: Port device team_slave_0 added [ 271.072963][T11782] team0: Port device team_slave_1 added [ 271.266639][T11782] device hsr_slave_0 entered promiscuous mode [ 271.512691][T11782] device hsr_slave_1 entered promiscuous mode [ 271.691464][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.698747][T11782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.706539][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.713935][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.792211][T11782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.813313][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.825873][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.835758][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.848141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 271.867551][T11782] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.883732][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.893556][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.902488][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.909726][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.956899][T11782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.968141][T11782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.983915][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.993241][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.002705][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.009874][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.019191][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.029038][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.038656][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.048304][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.057834][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.067517][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.076944][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.086000][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.095474][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.104578][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.119013][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.127639][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.156873][T11782] 8021q: adding VLAN 0 to HW filter on device batadv0 10:56:15 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 272.289450][T11789] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:56:15 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x84}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x9) inotify_init() r1 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r1, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) wait4(0x0, 0x0, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 10:56:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x0, 0x0) [ 272.774080][T11796] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 272.791048][T11796] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 10:56:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000001c0)=0x61c, 0x4) 10:56:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="2400000052001f0014f9f407000904ff0200070208000100ffffffff0800000000000006", 0x24) 10:56:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setns(r1, 0x19007fd74f008f83) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000180)=""/98, 0x1d8}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000500)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 10:56:16 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x8, 0x400, 0x4, 0x2cb}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800000, 0x4) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000140)={0x1, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x2c532658, 0x4, &(0x7f0000000180)=0xffffffffffff7fff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200)=0x4, 0x4) r3 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x80, 0x1c827c2e43b689dd) ioctl$TIOCNOTTY(r3, 0x5422) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x409dee38}, 0x8) r4 = dup(0xffffffffffffffff) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x1, 0x5e, ['TIPCv2\x00', '/dev/vsock\x00', '\x00', '%\x00', '/dev/amidi#\x00', '\x00', '/dev/hwrng\x00', '(\x00', 'ppp0,\x00', '\x00']}, 0x53) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r3, 0x0, 0x1, &(0x7f0000000380)='\x00', 0xffffffffffffffff}, 0x30) tgkill(r5, r6, 0x13) fcntl$setpipe(r2, 0x407, 0x401) r8 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x100000001, 0x10000) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) sendmsg$netlink(r8, &(0x7f0000000840)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000800)=[{&(0x7f00000004c0)={0x310, 0x1b, 0x2, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x6d, @fd=r7}, @typed={0x8, 0x30, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @generic="880550cedafbf25ef4a102e67491a6ea844d9b0d98992e948c1dcc4f548d9b8d79d771d4c0ba2f904c0331fd373e07ab4d40ee31389a700608b700780fdcff4e572d1d83c02cf8f2c539acfbe9055435a3fd0449a8f6dbb5ee82eb7ad72320f7591739e7468b7363ad52f5fbffa9286a3fb1d553d59ffc9df1b005fb24ecbe4c32827243663326104558417c9bc4b8d477635a88b0888f6dcd0b1ca32b45dfd7b68fec1695233fd876bf9d3b31230c91ceec3abe4434ef4190d0fafd903d2b75ba621e72c8d69718c059bfccac0073c010532ad2de91eebee8ce7621b948501c28", @nested={0x1cc, 0x4d, [@generic="ef9d7a7858b801ae3158dc07e1a66efad43db347974e2f07494b72e5bd28fe2d3627d4471da8f75ee42ebbd8959d4e4a55b828846951047a98c2d12b1acb38b533cc7a9c61fc97f713c436ea8c1519e608aa4d11a4476190e81ce85010b22c8114bddc7fae414c276da83da52445593750c6b342413514a8c86b3b7da6feb2e98d0511bd6faed38a922aef60342eac612dbd92c89fe9e8d59a918dd6de56cb6c90b7fcda770b2d278a55bc456b0fc585d39753e178a6a4729de2565329ba37cbb714", @generic="880ccf904ddf308baa588a5499130b865210d9df8d601445ff7af77efa261b82333f5b6a6aa27f23401d77bde727e2c65228897bbcd8cad09378939a0b7ca3dab22a22d0db85acfe1dd9880aaf8ed6d0c11e9ee73d6cd454815f250b2b9f52d4d858376165ec931dcf935254c7b32bc8aa8406d592810944daed06470fd0e7348c7c492e78938aba77fc3d3bd846e28157d74c06147bcfcc80d9adbbde507299a6d4122e3871471f8026ac0da59e6485ff0f26235f073146262ccec8f6b03790dc42ac42f7ffc89a724e077729928b94e1839345c1ba3b63662ce39f3568df098d1b206f0a98958ede", @typed={0x8, 0x7c, @fd=r9}, @typed={0x14, 0x4a, @ipv6=@mcast2}]}, @generic="3c236f525b04b18c8381a658337c0352bd5ba5e679db2a52c44bfb9fe33c46589ef476a58f907ae8d764bcb83b75bc9e4520dad9120b29a6d5ec37a4d979e33233c6"]}, 0x310}], 0x1, 0x0, 0x0, 0x800}, 0x1) r10 = creat(&(0x7f0000000880)='./file0\x00', 0x4) write$FUSE_NOTIFY_INVAL_INODE(r10, &(0x7f00000008c0)={0x28, 0x2, 0x0, {0x6, 0x6, 0x2}}, 0x28) r11 = syz_open_dev$sndtimer(&(0x7f0000000900)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$void(r11, 0xc004a48b) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000a00)) set_thread_area(&(0x7f0000000a40)={0x10001, 0x20001000, 0xffffffffffffcfff, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}) r12 = add_key(&(0x7f0000000a80)='cifs.idmap\x00', &(0x7f0000000ac0)={'syz', 0x3}, &(0x7f0000000b00)="b39654bbfc9691286cc8d94f5b753e", 0xf, 0xffffffffffffffff) r13 = add_key(&(0x7f0000000b40)='dns_resolver\x00', &(0x7f0000000b80)={'syz', 0x3}, &(0x7f0000000bc0)="3ca631407707b209a88fb88b56df17be64cb1c01fb4cd6e6f89dea90508e573445e99378bb685e53600db8efb8c29dccbb3f95580d244040a6c426ada3bf23c7afd3e55eef34ebc4fc2045fdea8851238df54eb58aaf78a2ed095359277baa4e16a67df81f708e21fe504e96b2cc3b06aa8e17532f5b1a79be0158449a6a8b2160b922ed4611b76fddd66085d98ac1f9c018000f844a343afd03710223880cb56592", 0xa2, 0xfffffffffffffff9) keyctl$negate(0xd, r12, 0xb26a, r13) 10:56:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x14) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07f02a0000000100ff0722000000450001070300001419001a00120002000d0001000a002500"/57, 0x39}], 0x1) [ 274.118357][T11821] IPVS: ftp: loaded support on port[0] = 21 [ 274.261489][T11821] chnl_net:caif_netlink_parms(): no params data found [ 274.316878][T11821] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.324153][T11821] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.332957][T11821] device bridge_slave_0 entered promiscuous mode [ 274.342903][T11821] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.350083][T11821] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.358784][T11821] device bridge_slave_1 entered promiscuous mode [ 274.390891][T11821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.404264][T11821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.438609][T11821] team0: Port device team_slave_0 added [ 274.448026][T11821] team0: Port device team_slave_1 added [ 274.526361][T11821] device hsr_slave_0 entered promiscuous mode [ 274.772605][T11821] device hsr_slave_1 entered promiscuous mode 10:56:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x803, 0xff) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7c, &(0x7f0000000080)={r4}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x8, 0x8, 0x80000000, 0x20, 0x10000, 0x7ff, 0xe0, r4}, &(0x7f0000000100)=0x20) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009000)=@newsa={0xf8, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast}, {@in6=@loopback, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xc4, 0x20000) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000040)='\\,em1md5sum/\x00', 0xd) [ 274.882559][T11821] debugfs: Directory 'hsr0' with parent '/' already present! [ 274.915915][T11821] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.923181][T11821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.930890][T11821] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.938177][T11821] bridge0: port 1(bridge_slave_0) entered forwarding state 10:56:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x803, 0xff) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7c, &(0x7f0000000080)={r4}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x8, 0x8, 0x80000000, 0x20, 0x10000, 0x7ff, 0xe0, r4}, &(0x7f0000000100)=0x20) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009000)=@newsa={0xf8, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast}, {@in6=@loopback, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xc4, 0x20000) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000040)='\\,em1md5sum/\x00', 0xd) [ 275.020792][T11821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.039783][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.054974][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.073638][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.098650][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 275.131594][T11821] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.160892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.170301][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.177544][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 10:56:18 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x2, 0x1, 0x8}}, 0x14) r1 = socket$kcm(0x10, 0x802, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x3, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(&(0x7f0000000080)='./file0\x00', r2, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x2, 0x803, 0xff) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x0, 0x80) close(r5) sendmsg$nl_crypto(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x41) r6 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x4, 0x2000) recvfrom$unix(r6, &(0x7f0000000240)=""/165, 0xa5, 0x40020100, 0x0, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1}, {0x6, 0x0, 0x0, 0x50000}]}) [ 275.263007][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.272053][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.279231][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.290354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.300390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.309875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.326771][T11821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.339705][T11821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.371222][T11821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.379605][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.388885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.397968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 10:56:18 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000080)="660f21c53664f20f38f0ef0f06baf80c66b89462c78666efbafc0cb80040efd91bb80b018ec87d09dbf266b8010000000f01c10f01c5", 0x36}], 0x1, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000140)={0x100}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000040)={0x7, 0xff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.522630][T11837] Unknown ioctl 1075343564 [ 275.534776][T11837] Unknown ioctl 1075343564 [ 275.683536][T11843] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 10:56:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x20) write$P9_RSYMLINK(r0, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x2, 0x3, 0x6}}, 0x14) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x800) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8949, &(0x7f0000000300)={'bridge_slave_1\x00', @ifru_hwaddr=@remote}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000280)) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0xfffffe3b, 0x0, 0xfffffd93}}], 0x8, 0x0) 10:56:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e20, @local}}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x29, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\n\xac\x0f\x00ype\x00'}]}, 0x24}}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7fffffff, 0x400000) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x5}, 0x28, 0x2) 10:56:19 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000001400)=@ipx, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0xbd}}], 0x1, 0x10021, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$rfkill(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000001700)) vmsplice(r0, &(0x7f0000001640)=[{&(0x7f00000000c0)="6ff18090034917640e36f5280f95ff6ecc734f5d62e4568616180c045bdbc74e2cdf1bf5c4c60d5dbe5cc6c2bb7ae376eb0b380d0803f721179843c4caab4c8aa9e2f51bf6d841bf377363eb4fbd4f3da52959b4f3cea4c6adcb7cec19aab86fca52671ec1c630c2b342d8167638c720a9621adbee59dd1098d7cb3c4f76f29711109ad1bd923b930403772e08ce3ffe9042490f7ad3d20264d8136367b19c1356350bfc6e6e7ed746971ca16f4f8ccdb84e5a04f8a6b8e4fa475c02252a0fc9750eef4f01adb0962e4d5ec2b3242cb129d6edefa2e891f1bd675631a75b3ff6e99d2c0f3bc1a36cf2a42033206f4a", 0xef}, {&(0x7f00000001c0)="953166ec232f3fc883150852ef46ba340596291ceb8feef13a121e26185fd902693cf9619c7871c625aeebad62baae62cc5c82a224fc4b3dc6b0c47ea27621113e0b2aaf8a097d045ab14b0d9d716c3ac0c3bd81", 0x54}, {&(0x7f0000000040)="6af26b3f75fa633126da148c85f9400f860a16b78bc3faccbd7c890f0d4863c7060f1656a5cb1829ec3f", 0x2a}, {&(0x7f0000000240)="360d9813c8b2a038328738a9729f252294da1409daefc45c2c5729954220a9a50fb2509fbb0885e17ee6036fc79b1218b16392753b6d7c3cf8e872cf14b6cfbae74602729f2f81cf3040c9359c96b39820e25362b4e539afbfc26ff0ed4bedc41c438bd664b1e929201720ca3d9ea80f7941834ddd41d93385", 0x79}, {&(0x7f00000002c0)="90ef47c18aef53062729b1c6bd7ba44df4e041022c0ba7aac99e713c72423973a48adaf872e9933b66f430a45cca9410ff5a8fa696040d8e6deb72ef8852e54053291b3366e6496997f058d55fc5ccdb707826b15e9b013d2d94e32cfcb575071706c955d1ac8fedf9c14f5a656954b2b6dd5da3e9077605ae1aacb6f98f6d1b1adf6d66945e7bd40b6bf21df3", 0x8d}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001480)="f93825f07079f408b1462a73e13dc5e7e3c77c96f117e00199774c6409b0a9b5e6bd69f1f3cc5dd9d0ca894dfe9c596bc2b23d3e583ea893e6e4ee654d6cfb252b0d8d955f614956f918f82bc191f6211aafdb47542bf83fe6bafcd19b862bd0e4f30541ced2d3f4a051830d9787f34c540b11b54766008f14c69ed58871375c8002a38eada4b2be47ed09c29411439b1b48a02899107425c624df3c938a86b73ab2829e8947f3c03a8f098706fb", 0xae}, {&(0x7f0000001540)="98887efda28d9c19a2c6513d67116328e81446d9eb1e4d681b13c40de1f3498f852fc670ffa8a4be5e2dddade849f6e166d17e3db0d15d28cf125faeddf59e0f9bc7591d45392df0801b0bcc3ba3b0e4129d1433625dd3d10f1ed5c15e06ebb2bc8ef569aafa7aec0f74a1905c83156c50bacff353ac2ddd217a4908a431a3626cc4b746fb1427670aae2f739ab29b6bd9593e18e6563f87db642af78fdf19fc87afc2f3bf0a5023dc789b2420c6d414bb4e6dea8cc413bb31145dc86e01aa10cf15be5f79fb563d50c80907bc80950f75b34661b41e8b0a1c4e29cdfd2b71ea0b357ab34609151c59", 0xe9}, {&(0x7f0000001380)="30a692ad9215313c008b82a82685011a75c3cdecade1be9a945203e3440230674a7d25896368d52fd6770fe0bf7e0d41e106e675", 0x34}], 0x9, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000013c0)={0x0, @aes128}) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x80000000000003a) 10:56:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000000702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d64050000000000450400000000000007040000002d2000b7040000100000206a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) 10:56:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x713080, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='\x00', r2}, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl(r0, 0x1000008914, &(0x7f0000000040)="1170b646f7") r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 277.137348][T11862] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 10:56:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x40010, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) [ 277.719081][T11866] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 10:56:20 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200000, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000080), 0xc, &(0x7f0000001380)={&(0x7f0000000140)={0x123c, 0x10, 0x200, 0x4, 0x25dfdbfd, {0x19}, [@typed={0x8, 0x15, @fd=r1}, @generic="223af4b72d3efafdaf5f7e0976531f803cbe0d939a3dcdd2953d08c4c14b042b2a43f9ac8933093db3496f1973c641f5b4de253595d07535f478916692acb7a54cec0e569e83c790e36ce00d505a1035baeff5a8d6db0b0531754d9a1560e2501fb635ed3dd04814b95f86729457a1ee44788c8e7b4caa7e8a39630ed76b5795891e1de6d02c86d62b2adaad7ee8da3641e8", @nested={0x148, 0x1c, [@generic="c9ef6098e6160ef7296a725fd071d0203f900f773acbb87300140dce9af5b1ee88dc15a2be8a3a02fea42421f762cb29aabf6aa1120c348c1d0b7077b5f3d7e726964a3018ed39bd14507025680d019521d3478a69288f91", @generic="1aaa6036c72201ba6122efe2f79bec8c791da5ffe1fa9722d2e722d4e6fcacc83d99d538e55aecf7218fe8cc80f3c8210b0fc1d327d217cb06517d30900673d6b6fb75e7f45ba1661ee34227008e9462d2a08d83c8c225ffe42ae0019727900a166c208a1c27e28f", @generic="352c625bc946b37c2a74cb11b194d16505412f3f8e9e5240355d4662e6194b95c8b4a384849aa03997b874c7a443c52d2e27cb098ebca69cb1e6678d68505497461fd781b88f6c2b31aab2e78991a4d18b8af26da4dd47e56039c5a03437116b7e5255345b538ed2205285c697c71cf554fc0369ea2c510a8fdb99bde87c96decf30cf"]}, @nested={0x40, 0x6c, [@typed={0x8, 0x33, @pid=r2}, @generic="bbc97a256f72988917dc50d906c715ed33a48f30cf8bdc3c56ac43affabfaab1213a7c1b7c50ce9bb0112a0a3261218ef1"]}, @typed={0x1004, 0x4f, @binary="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"}]}, 0x123c}, 0x1, 0x0, 0x0, 0x1}, 0x6040003) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001400)={0x6, 0x9, 0x9, 0x2, 0x8}, 0x14) r3 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000001480)={{0x6, 0x13957662b0ad25e8, 0x7, 0x552, 'syz0\x00', 0x3}, 0x0, 0x8, 0x6, r3, 0x1, 0x9, 'syz1\x00', &(0x7f0000001440)=['/dev/dsp\x00'], 0x9, [], [0x3, 0x40, 0x7, 0x2]}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vsock\x00', 0x101000, 0x0) execveat(r4, &(0x7f0000001600)='./file0\x00', &(0x7f0000001740)=[&(0x7f0000001640)='mime_typekeyring*\x00', &(0x7f0000001680)='syz0\x00', &(0x7f00000016c0)='cpuset)wlan0em1\x00', &(0x7f0000001700)='/dev/ion\x00'], &(0x7f0000001940)=[&(0x7f0000001780)='/dev/ion\x00', &(0x7f00000017c0)='/dev/ion\x00', &(0x7f0000001800)='-\x00', &(0x7f0000001840)='syz1\x00', &(0x7f0000001880)='\x00', &(0x7f00000018c0)='em0\b\x00', &(0x7f0000001900)='syz0\x00'], 0x1000) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000001980)={'syz_tun\x00', 0x6}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/full\x00', 0xf2e695efbd5a401a, 0x0) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000001a00)=0x7402) pipe(&(0x7f0000001a40)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000001a80)=[@in6={0xa, 0x4e23, 0x5, @remote, 0xfffffbff}, @in6={0xa, 0x4e24, 0x5, @remote, 0x5}], 0x38) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001ac0)={0x0, 0x0}) write$FUSE_LK(r0, &(0x7f0000001b00)={0x28, 0x0, 0x8, {{0x7, 0xfffffffffffffd58, 0x0, r7}}}, 0x28) pipe(&(0x7f0000001b40)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000001b80)={0x0}) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000001cc0)={r9, 0x5, &(0x7f0000001bc0)=[0x20, 0xd813, 0x6, 0xc, 0xdfb], &(0x7f0000001c00)=[0x3], 0x20, 0x7, 0x8000, &(0x7f0000001c40)=[0xad87, 0x8001, 0x4, 0x6d99, 0xa53, 0x5, 0x4], &(0x7f0000001c80)=[0x5, 0x8]}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000001d00)={'eql\x00', {0x2, 0x4e20, @local}}) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/vga_arbiter\x00', 0x4001, 0x0) ioctl$NBD_DO_IT(r11, 0xab03) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/vga_arbiter\x00', 0x42, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001e00)={&(0x7f0000001d80)='./file0\x00', r12}, 0x10) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000001e40)) r13 = creat(&(0x7f0000001e80)='./file0\x00', 0x2) ioctl$BINDER_SET_MAX_THREADS(r13, 0x40046205, &(0x7f0000001ec0)=0x5) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001f00)) [ 277.920125][T11866] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 10:56:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="f30f2d49000f1848d23e3e0f1a51acf08296a89dc3ba6100ed0f01b10000670f22c3ea000000000f800048f33a0c", 0x2e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:56:21 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) close(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20, 0x84800) 10:56:21 executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = gettid() process_vm_writev(r1, &(0x7f0000000180), 0x21e, &(0x7f00000001c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = getpgid(r1) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd}) write(r0, &(0x7f0000a6b000)="1f0000000102ff00fd4354c007110000f305010008000100010423dcffdf00", 0x381) 10:56:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', &(0x7f0000000240)=""/97, 0x61) sendmsg$nl_xfrm(r1, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9401000010000302000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x0) [ 278.401147][T11886] IPVS: ftp: loaded support on port[0] = 21 [ 278.427372][T11883] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.436887][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.503621][T11889] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.514812][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.600963][T11886] chnl_net:caif_netlink_parms(): no params data found 10:56:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffee, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000140011090001000000000000021000001800000014000300fe880000c6210002000000000000007abf89d2b8ac1fab9a06ab4cc116f8a6c341a3520803e40699e432a0171346435e"], 0x2c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x218002, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000240)=""/239) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x8, 0x9, 0x1, 0x8, 0x0, 0x1, 0x9401, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc6c8a39ddba574b6, @perf_config_ext={0x100000000, 0xfe00000000000}, 0x10855, 0x1ff, 0x4, 0x1, 0x2, 0x8001, 0xffff}, r2, 0x4, r3, 0x8) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492191, 0x0) 10:56:21 executing program 0: getrandom(&(0x7f0000000000)=""/31, 0x1f, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r5 = dup(r3) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000000c0)={0x8d, 0x0, 0x0, 0x40}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 278.659272][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.666606][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.675574][T11886] device bridge_slave_0 entered promiscuous mode [ 278.778995][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.786995][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.795788][T11886] device bridge_slave_1 entered promiscuous mode [ 278.828870][T11886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.843315][T11886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.881489][T11886] team0: Port device team_slave_0 added [ 278.892878][T11886] team0: Port device team_slave_1 added [ 278.966234][T11886] device hsr_slave_0 entered promiscuous mode [ 279.013666][T11886] device hsr_slave_1 entered promiscuous mode 10:56:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200800, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) [ 279.221891][T11886] debugfs: Directory 'hsr0' with parent '/' already present! 10:56:22 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu&3\n\x00\n\xc0\xf9\x02\x00\x00\x00\x00\x00\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x12\x1feq*\xeb\x00\xb5x\x7fV-W\xeb\x9c\xf5\xe5 d\x99]O\x13\x99uJ\xbd\xefe\x83\xc2\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80\x00') [ 279.412270][T11886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.446866][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 279.473823][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.482991][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.498418][T11886] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.549087][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.559150][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.568224][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.575455][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.583877][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 10:56:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x4) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'\x00', 0x6}) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x8ba4, 0x8, 0x4}, 'syz0\x00', 0x5}) [ 279.593344][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.628756][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.636189][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.646964][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.683968][T11886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.694872][T11886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.710282][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.719394][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.728912][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.738578][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.748036][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.761569][T11921] input: syz0 as /devices/virtual/input/input5 [ 279.783452][T11886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.812207][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.850440][T11921] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 10:56:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b49d000000000000611018000000000046050000000000009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x1e) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0xb, 0x4, {{0x81, 0x80, 0x0, r2}}}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8, 0x21, 0x1, r4}) 10:56:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x42, 0x23, 0xd7, 0x10, 0xd8e, 0x7110, 0x557f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2d, 0x0, 0x0, 0x2a, 0x60, 0xe2}}]}}]}}, 0x0) [ 279.972824][T11927] Unknown ioctl 35124 [ 279.987455][T11929] Unknown ioctl 35124 [ 280.352624][ T2973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 280.592978][ T2973] usb 3-1: Using ep0 maxpacket: 16 [ 280.668721][T11920] input: syz0 as /devices/virtual/input/input6 [ 280.733619][ T2973] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 280.741897][ T2973] usb 3-1: config 0 has no interface number 0 [ 280.748096][ T2973] usb 3-1: New USB device found, idVendor=0d8e, idProduct=7110, bcdDevice=55.7f [ 280.757540][ T2973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:56:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r1], 0x18}, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) sendto(r3, &(0x7f0000000000)="db6d59e463e5bea7e26a5a0f888d0f93429697418602f6cb1e13bace82b9a2677237289b315e1902901ffb88b7fe41675624c0a3", 0x34, 0x820, &(0x7f00000000c0)=@ipx={0x4, 0x2, 0x8391, "5f7c512a1c46", 0xb0}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 280.798202][ T2973] usb 3-1: config 0 descriptor?? [ 280.902641][ T2973] usb 3-1: Direct firmware load for atmel_at76c503-i3861.bin failed with error -2 [ 280.912331][ T2973] usb 3-1: firmware atmel_at76c503-i3861.bin not found! [ 280.919407][ T2973] usb 3-1: you may need to download the firmware from http://developer.berlios.de/projects/at76c503a/ [ 280.930981][ T2973] at76c50x-usb: probe of 3-1:0.45 failed with error -2 10:56:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000000200)=0x84) r2 = dup(0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000240)=0xfffff000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000900002c2700000000000000ffff00000000"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000080)={0xffffffff, 0x4, 0x4420, 0x9}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', r5}) [ 280.965108][T11942] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 281.009327][T11946] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 281.048710][ T2973] usb 3-1: USB disconnect, device number 2 10:56:24 executing program 0: r0 = socket(0x200001000000011, 0x4000000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = fcntl$dupfd(r0, 0x0, r0) write$ppp(r3, &(0x7f0000000080)="dd00b6b3c6b17f26e9d1000086dd", 0x36) [ 281.084910][T11947] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 281.116994][T11947] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 10:56:24 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0x5, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='\x8bD\xdb\xef@&\xfeX\x00', 0x80800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 10:56:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket(0x9, 0x1, 0x23) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7c, &(0x7f0000000080)={r4}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r4, 0x1e0, 0x0, 0x6c1, 0x9}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r5, 0x40}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000001c0)={{0x3, 0x0, @descriptor="33b19e4806b2f5c6"}, 0x72, [], "268830fa927d7d90e4ef448da0ae50c062bbeb2d160e5a623220812190dcb4fc9c4efb2074bcf64f5bc0c4da41bbf7bbd7b86934d5bf424c25f7e9ce4763331c941c2399a8cb8bf0c3e035452c224728be41140e179eba5f27e1b8b46f806f8b43a393fa0a5edf62b95493c741ad17638533"}) r6 = socket(0x2, 0x803, 0xff) connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000002c0)={0xc42, 0x1, 0x3, 0x4, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @local, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0xc7}, &(0x7f0000000180)=0x98) 10:56:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x80000001, "baf7cd41b4963e976b742cf2ee3f99581d89418333d35f0bb0864cbffb753fe4", 0x20, 0xffff0000, 0x4, 0x14, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dcab0d5e0be6e47bf070") r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1f7, 0x0, 0x0, 0xfffffffffffffee1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x21d, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x0, 0x139d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:56:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x42, 0x23, 0xd7, 0x10, 0xd8e, 0x7110, 0x557f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2d, 0x0, 0x0, 0x2a, 0x60, 0xe2}}]}}]}}, 0x0) [ 281.932088][ T2973] usb 3-1: new high-speed USB device number 3 using dummy_hcd 10:56:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) fcntl$dupfd(r2, 0x0, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$vnet(r5, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x9c) [ 282.173032][ T2973] usb 3-1: Using ep0 maxpacket: 16 [ 282.293314][ T2973] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 282.301640][ T2973] usb 3-1: config 0 has no interface number 0 [ 282.307985][ T2973] usb 3-1: New USB device found, idVendor=0d8e, idProduct=7110, bcdDevice=55.7f [ 282.317244][ T2973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.329701][ T2973] usb 3-1: config 0 descriptor?? [ 282.374537][ T2973] usb 3-1: Direct firmware load for atmel_at76c503-i3861.bin failed with error -2 [ 282.384121][ T2973] usb 3-1: firmware atmel_at76c503-i3861.bin not found! [ 282.391371][ T2973] usb 3-1: you may need to download the firmware from http://developer.berlios.de/projects/at76c503a/ [ 282.402967][ T2973] at76c50x-usb: probe of 3-1:0.45 failed with error -2 10:56:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r6, {}, {0x0, 0x2}, {0x0, 0xfff6}}}, 0x24}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffdc2, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b0e0000273de3735a10aad60000053969a82597", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="180012000800010076746900c401020008000500ac02141d"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 282.571473][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.592744][ T2973] usb 3-1: USB disconnect, device number 3 10:56:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r4) prctl$PR_GET_TSC(0x19, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0155f100192a786c771e344fd5c663d9968874ff042656df19d1f9d4f700f46b7f7b72edd52da7ca76f4355d8aea7d6206bcdc017630d84b8593a070b770ca1453a9694b", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e21, 0xfffffffb, @dev={0xfe, 0x80, [], 0x25}, 0x7}}}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r7, 0x10000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r9, 0x222) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "613fb28139c3c126103cfc69203ef1c97625453733d4799d6f1b532497150f86", 0x30383653}) r10 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="9f000000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0x7c, &(0x7f0000000080)={r13}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={r8, 0xd1, "1275b8bc8c562013f32f639799ea09dbcfee8e012a7083d8b48c95e130dcfeddacf6d90e832d9c94efebaf22e37782d9b991ff51b76b0e4d017539f3232f17bcdeec496c788481864952daf42705966e6abf502778d16d4af3b5525dd8a7a8ba6f9211bfd521a1b0ac7d2046dce1c57555bf6d94700a8b74966cba4adf816f889d8be662d92fcb18532f56465694742585c49f6d1a657fcbf2be610c2214eb744c6d6fa0d0a26547585b271227590604e2ec7cd37f985b232423a2682bb5d61258ebea43f081a4e27c227d108fe5111567"}, &(0x7f0000000400)=0xd9) ioctl$CAPI_GET_SERIAL(r10, 0xc0044308, &(0x7f00000000c0)=0x80000000) ioctl$CAPI_GET_MANUFACTURER(r10, 0xc0044306, &(0x7f00000002c0)=0x3ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f0000000440)={0x9, @pix={0x6, 0x8, 0x0, 0x3, 0xffffffff, 0x9, 0x6f3a30434bb87c07, 0x20, 0x2, 0x92fcae4375f0182e, 0x0, 0x7}}) 10:56:26 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff8, 0x8000) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x6298, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) bind$rds(r1, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2000) flock(r2, 0x2) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001280)='/dev/btrfs-control\x00', 0x8401, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000012c0)={{0x9, 0x7, 0x5, 0x3f, 0x7, 0x1}, 0xffffffff}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001300)='/dev/zero\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000001340)={0x6, 0x4, 0x81, 0x5, 'syz1\x00', 0x4}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000013c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002740)={0x0, @initdev, @remote}, &(0x7f0000002780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000aa00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f000000ab40)={0x0, @rand_addr, @loopback}, &(0x7f000000ab80)=0xc) recvmsg(0xffffffffffffffff, &(0x7f000000aec0)={&(0x7f000000abc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000ad80)=[{&(0x7f000000ac40)=""/80, 0x50}, {&(0x7f000000acc0)=""/148, 0x94}], 0x2, &(0x7f000000adc0)=""/244, 0xf4}, 0xa002) accept$packet(0xffffffffffffffff, &(0x7f000000af00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000af40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000b200)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f000000b300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000b500)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f000000b980)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f000000b940)={&(0x7f000000b540)={0x3e4, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x110, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff800}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x8, 0xc5}, {0x4, 0x2, 0x6, 0x20}, {0xfffe, 0x1f, 0x79, 0xffff}, {0x292a, 0x1, 0x1f, 0x2}, {0x2, 0x3f, 0x80, 0xffffff82}]}}}]}}, {{0x8, 0x1, r8}, {0x134, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x0, 0x3, 0x9, 0x20}, {0x80, 0x3e, 0x6, 0x1}, {0x9, 0xee, 0x0, 0x3ff}, {0x6, 0x7f, 0x8, 0x5}, {0x400, 0x20, 0x9, 0x9}, {0x3f, 0x1, 0x1f, 0x407}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x3e4}, 0x1, 0x0, 0x0, 0xe5493a6b603f21c0}, 0x40000c1) r15 = syz_open_dev$usbmon(&(0x7f000000b9c0)='/dev/usbmon#\x00', 0x2, 0x10000) ioctl$HIDIOCGFLAG(r15, 0x8004480e, &(0x7f000000ba00)) chroot(&(0x7f000000ba40)='./file0\x00') pivot_root(&(0x7f000000ba80)='./file0\x00', &(0x7f000000bac0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f000000bb00)={0x0, 0x40, 0x5, 0x10001, 0x81, 0x80000000}, &(0x7f000000bb40)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f000000bbc0)={r16, 0x2c, &(0x7f000000bb80)=[@in={0x2, 0x4e23, @rand_addr=0xe0eb}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x3d}]}, &(0x7f000000bc00)=0x10) 10:56:26 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f00000000c0)=0x80000000) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000180)={0x8, &(0x7f0000000140)="c3aaa365b288793d89657a0c70f8548d4c08137538b2a260a5477ce37aa1d50a83fabc1edc9d663e83efcd47415fe0b4a8ea6b"}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) splice(r1, &(0x7f00000000c0), r3, &(0x7f0000000100), 0x100000000, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r4, 0x1000000000016) 10:56:26 executing program 2: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x2000, 0x0) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000380)=0x66) rt_sigaction(0x2c, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="8f89889757e2c483397871c0c36440d25870f30f5e9b2a000000c4223d28144cc46165f2df2e660f7c4600c4e1a1fd2c3cc4e3f916fd0344802900", {}, 0x0, &(0x7f0000000200)="8f2938015af0c483790869500cc443c9480a008fea5012cd00e00000400face00566440fd2bb2a406152460f34f2400f1bf6c48291ddffc44135f36143"}, 0x8, &(0x7f00000002c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000440)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/132) unshare(0x40000000) r3 = socket(0x2, 0x803, 0xff) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r3) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @remote, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0x58, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, r4, {0x5, 0x1}, {0xa, 0xc}, {0xf}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x4}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8001}}}, @TCA_RATE={0x8, 0x5, {0x50, 0xb}}, @TCA_RATE={0x8, 0x5, {0x2, 0x9}}, @TCA_RATE={0x8, 0x5, {0x8, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x5f, &(0x7f0000000100)=0x1) [ 283.274148][T11988] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 283.316237][ C0] hrtimer: interrupt took 61958 ns [ 283.382225][T11993] IPVS: ftp: loaded support on port[0] = 21 [ 283.424098][T11995] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 283.581424][T11997] IPVS: ftp: loaded support on port[0] = 21 10:56:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_open_pts(0xffffffffffffffff, 0x103080) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000001e00)) 10:56:26 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x3, 0x3, 0xff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x6f, 0x0, &(0x7f0000fc1ffc)=[@enter_looper], 0xfffffefc, 0x0, 0x0}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000140)="2a97be39d1463cdc74256409731776420d40437697633e687da62456de479e94f2f35af0483b9bfd9eca80f90367f2b945ab1cbb3a93d316648abac3feaa6f1ccee0fc5bc23c2bb1011161db7d3d8aeb55d1e248d67d1c040b54c17db834ff16dea5e4b5c3fd51bd574330520a0ac8ff2896dff0db69c60cafd5dc7af5806905beb73c952b73733c649dd17df9009d478b2a861e62a5dea4a4b27b151c625f1728cdd85daca92061a17f5ca18b4e9b1e679e77dce3f3e8ed0214c6c4785fadce6aa9831e4b81d8fd7aaf4fcfa5f0ea81eaffd4348a92174e5c3c3881d5a0", 0xde, 0x20080000, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) [ 283.700501][T12001] input: syz1 as /devices/virtual/input/input7 [ 283.737691][T12004] binder: 12003:12004 unknown command 0 [ 283.743485][T12004] binder: 12003:12004 ioctl c0306201 20000000 returned -22 [ 283.808031][T12006] binder: 12003:12006 unknown command 0 [ 283.814298][T12006] binder: 12003:12006 ioctl c0306201 20000000 returned -22 [ 283.884395][T11997] chnl_net:caif_netlink_parms(): no params data found 10:56:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x37}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'irlan0\x00', {0x2, 0x7, @multicast1}}) [ 283.993939][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.002502][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.011696][T11997] device bridge_slave_0 entered promiscuous mode [ 284.021572][T12011] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 284.029987][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.037366][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.043607][T12012] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 284.046023][T11997] device bridge_slave_1 entered promiscuous mode [ 284.077388][T11993] IPVS: ftp: loaded support on port[0] = 21 10:56:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) writev(r1, &(0x7f0000001780)=[{&(0x7f00000005c0)="42d09996b092dc5e12ccde386e16712ec4aa8f4af63e81907b2147872eb4ddeb05985ccb4859858a77fe500f72045ec6cf5968f0b070aa9c8d3d84ec8a7bb7a03cee868ceeb061d99faef556dd34d05d3ad7940e5a1843552aa1bdb9f534e1b1d900059b6699224dff2039cc9d70f8545f5b783c908cddb31f2111879ec14e04a7643982b1d4102f397ac5dc3c9ae4b6fcd4500c2af18f8daa49699a7e5164203a8b8040a59a7cc72aa499d78b1bb35ee7655a3d639bc9851d2aae43935c8d0de62355cf5ed9fce2a13f9b48c320829e03930ab55cae472313fe3372fb13f7f2ceb3c347028ae8351496d84bd07292d7ecc9d86ee1927be643f67ee2b29f", 0xfe}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="e7009e0a6593ba460568f729afebae55596410ac9d8c3781cbfd0d84af9fafeea227fdc14c560aa5579b73c0b69bc7375dd1666fcc0452cba5b494c79c0af8c14f5e21ea7e16c324b37bb65ef569110b4d5282af5629a9889315aedc261fccd10b10681a4197c2db5e295a88c67786a0ffae96574a4891f45eca29c3c2fbe17f039f19da9a4c623ccff43dc48df580d83df7b84ce629c647baef3273df9297048d82ec99b0b433f01a8bf284", 0xac}], 0x3) r2 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x2, 0x2) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000540)={0x3, 0x8a}, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x1600, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000001000050700000000fbdbdf250000000010144caa2f1f5e04fc5fbdb8b2275335b0db87089cf29e2d6ec7e2060361d469657041684a0d51d36ed8c363ad4990f182beb596e3e54b3de1bd0ff0badc03df924b7f208113a401cf7acec2a1db159565b0416343b54336a09fb09febe84d78e612f6d23d4db582000b9143dc0759861e", @ANYRES32=0x0, @ANYBLOB="00000000000000000800290000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="15000050a7267100"], 0x50}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@newae={0x1c4, 0x1e, 0x324, 0x70bd2d, 0x25dfdbfe, {{@in6=@rand_addr="c56926b8d1ba7c42ecaa002b97cee6a8", 0x4d4, 0x2, 0x3c}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x81, 0x3506}, [@user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@broadcast, 0x0, 0x2}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e22, @in=@dev={0xac, 0x14, 0x14, 0x28}}}, @ipv4_hthresh={0x8, 0x3, {0x1b, 0x11}}, @lifetime_val={0x24, 0x9, {0x4, 0xfffffffffffffff9, 0x86d, 0x6}}, @algo_auth={0xe0, 0x1, {{'crct10dif-arm64-ce\x00'}, 0x4b0, "ad1846eea2da61bf1fd7d90946f6eaf25a66171d1b958f397ec0ece08676b7d39d8f9fe451421d5074cd19886ae8ff8bb4b7a208d377b11d866543e332117537d2c648aac083965c2fb306553f15bb44153130cdeb0440cd053e7d1492f7ab3171713f9fd951b0c9b46233289f5879cb27e7f81b2ae48de747412ea8fd2c9a1d1e5df455735066f50f65542a6cfc11970a77d700dba1"}}, @extra_flags={0x8, 0x18, 0x5}, @srcaddr={0x14, 0xd, @in6=@local}, @tfcpad={0x8, 0x16, 0x9}, @mark={0xc, 0x15, {0x35075d, 0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x4) [ 284.196277][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.218601][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.250165][T12017] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 284.272615][T11997] team0: Port device team_slave_0 added [ 284.282847][T11997] team0: Port device team_slave_1 added [ 284.291932][T12017] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.396379][T11997] device hsr_slave_0 entered promiscuous mode [ 284.504096][T11997] device hsr_slave_1 entered promiscuous mode 10:56:27 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x105400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 284.592563][T11997] debugfs: Directory 'hsr0' with parent '/' already present! [ 284.616301][T12018] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 284.649450][T12017] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 10:56:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x43602) io_setup(0x5, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3, r4, &(0x7f0000000080)="0497b1f4eb4d5e370ed0440a7d9685f9eb816b6e5bf6dbf39862e41d09037665bcc6bc8f1abe9f0d6bd6a33e0707512dddd16354770b153ed8ba9617ef5bfdbd6f33a77d1ba780af3b1e3c0fbfa468ef72c4db79da8175d431ab4b2769ed6b9b9133222db7", 0x65, 0xffffffff, 0x0, 0x0, r5}]) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000280)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 284.957139][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.064491][T11997] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.071967][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.080370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.109003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.118436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.127809][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.135025][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.214696][T11997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.226020][T11997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.240122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.248921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.258663][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.267751][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.274970][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.283421][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.293327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.303455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.313204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.322640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.332343][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.341796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.350684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.360309][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.369503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.408127][T11997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.427233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.436595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:56:28 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r1, 0x5, &(0x7f00000000c0)="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") request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0x1, 0x6c00}, &(0x7f0000000040)='R\trusB\xe3cu:1q\x00\x00\x00\x00\x00\x00\xb6\xe0c\x94\x1bH\x94\x1d\xe7T!\b\xb3\x04Wf4H\\\xf3\xd0.`0\xdf\x8c\f\x8a\xaa\x8a\xd7\x84\xcd\xe5\xf7dMY\x11@)\xba\xfbM\xf5+\xf9y(k\xe6\xd9\x82{a\x8c\xb7\t\xf2\x06g\xc3\xa7\xf70\xcaU;\xae~\xc0\xa9\xcd\xb2\x86h\xd8\xcd', 0x0) 10:56:28 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x105400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 10:56:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000160000000000000000ec00000cafbc326156e53c"], 0x5c}}, 0x0) 10:56:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x105400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 10:56:29 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r1, 0x5, &(0x7f00000000c0)="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") request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0x1, 0x6c00}, &(0x7f0000000040)='R\trusB\xe3cu:1q\x00\x00\x00\x00\x00\x00\xb6\xe0c\x94\x1bH\x94\x1d\xe7T!\b\xb3\x04Wf4H\\\xf3\xd0.`0\xdf\x8c\f\x8a\xaa\x8a\xd7\x84\xcd\xe5\xf7dMY\x11@)\xba\xfbM\xf5+\xf9y(k\xe6\xd9\x82{a\x8c\xb7\t\xf2\x06g\xc3\xa7\xf70\xcaU;\xae~\xc0\xa9\xcd\xb2\x86h\xd8\xcd', 0x0) [ 286.644335][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:56:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100001c, 0x12, r1, 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "e24195c7aca9424ee1ff5a9acb44a290fa071f15"}, 0x15, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001e000507ed0080648c63b8ee204494f20500d200050011404b48000001000080000000000300f88000f0", 0x2e}], 0x1}, 0x0) 10:56:29 executing program 2: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x2000, 0x0) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000380)=0x66) rt_sigaction(0x2c, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="8f89889757e2c483397871c0c36440d25870f30f5e9b2a000000c4223d28144cc46165f2df2e660f7c4600c4e1a1fd2c3cc4e3f916fd0344802900", {}, 0x0, &(0x7f0000000200)="8f2938015af0c483790869500cc443c9480a008fea5012cd00e00000400face00566440fd2bb2a406152460f34f2400f1bf6c48291ddffc44135f36143"}, 0x8, &(0x7f00000002c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000440)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/132) unshare(0x40000000) r3 = socket(0x2, 0x803, 0xff) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r3) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @remote, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0x58, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, r4, {0x5, 0x1}, {0xa, 0xc}, {0xf}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x4}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8001}}}, @TCA_RATE={0x8, 0x5, {0x50, 0xb}}, @TCA_RATE={0x8, 0x5, {0x2, 0x9}}, @TCA_RATE={0x8, 0x5, {0x8, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x5f, &(0x7f0000000100)=0x1) [ 286.919207][T12058] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.967232][T12059] IPVS: ftp: loaded support on port[0] = 21 10:56:30 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x105400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 10:56:30 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x2000, 0x0) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000380)=0x66) rt_sigaction(0x2c, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="8f89889757e2c483397871c0c36440d25870f30f5e9b2a000000c4223d28144cc46165f2df2e660f7c4600c4e1a1fd2c3cc4e3f916fd0344802900", {}, 0x0, &(0x7f0000000200)="8f2938015af0c483790869500cc443c9480a008fea5012cd00e00000400face00566440fd2bb2a406152460f34f2400f1bf6c48291ddffc44135f36143"}, 0x8, &(0x7f00000002c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000440)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/132) unshare(0x40000000) r3 = socket(0x2, 0x803, 0xff) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r3) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @remote, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0x58, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, r4, {0x5, 0x1}, {0xa, 0xc}, {0xf}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x4}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8001}}}, @TCA_RATE={0x8, 0x5, {0x50, 0xb}}, @TCA_RATE={0x8, 0x5, {0x2, 0x9}}, @TCA_RATE={0x8, 0x5, {0x8, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x5f, &(0x7f0000000100)=0x1) 10:56:30 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0x0, 0x52, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) r2 = socket(0x2, 0x803, 0xff) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r4 = socket(0x2, 0x803, 0xff) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0xc0e, 0x2, 0x4, 0xc, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r3, 0x10001, 0xffffffff, 0xf5, 0xa1, 0x1d1f, 0x5, 0xc62e, {r5, @in6={{0xa, 0x4e24, 0x81, @loopback, 0x7}}, 0x400, 0x8000, 0x800, 0x8, 0x3}}, &(0x7f0000000240)=0xb0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 10:56:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) sendmsg(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeec, &(0x7f0000000080)=[{&(0x7f0000000040)="0ae6246758bf65fb77d769bc3e8608f76a51a0b3"}], 0x100000000000000e}, 0x0) [ 287.931003][T12077] IPVS: ftp: loaded support on port[0] = 21 10:56:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12f50371"], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000380)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x6e, 0x0, 0x0}) 10:56:31 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0x0, 0x52, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) r2 = socket(0x2, 0x803, 0xff) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r4 = socket(0x2, 0x803, 0xff) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0xc0e, 0x2, 0x4, 0xc, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r3, 0x10001, 0xffffffff, 0xf5, 0xa1, 0x1d1f, 0x5, 0xc62e, {r5, @in6={{0xa, 0x4e24, 0x81, @loopback, 0x7}}, 0x400, 0x8000, 0x800, 0x8, 0x3}}, &(0x7f0000000240)=0xb0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 288.184542][T12082] debugfs: File '12081' in directory 'proc' already present! [ 288.212287][T12082] binder: 12081:12082 unknown command 1896084754 [ 288.218777][T12082] binder: 12081:12082 ioctl c0306201 20012000 returned -22 [ 288.265295][T12084] binder: 12081:12084 ioctl c0306201 20000140 returned -14 [ 288.305417][T12084] debugfs: File '12081' in directory 'proc' already present! 10:56:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) fsync(r7) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r8, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x118, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r10, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_PORT_SELF={0x80, 0x19, [@IFLA_PORT_PROFILE={0x10, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '[!,\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x80}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'eth1\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0xf7}, @IFLA_PORT_PROFILE={0x14, 0x2, 'selfvboxnet0,!^\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f7b939cc65e09df058923f6baacef450"}]}]}, 0x118}}, 0x0) 10:56:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x9, 0x23, 0x1, 0x70bd2a, 0x0, {0x14, 0xe00000000000000}, [@typed={0x11, 0x9, @ipv6=@ipv4={[], [], @rand_addr=0xffffffff}}]}, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 10:56:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000640)=""/8) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000700)={0x0, 0x3, 0x1ff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'gretap0\x00', 0x5e8e}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0xe6, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, 0x0, 0x6}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000880)={[0x7ff, 0x1a97b7a2]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:31 executing program 2: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r6, 0x0, r6) r7 = socket$kcm(0x10, 0x802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x3, r8, 0x0) r9 = socket(0x2, 0x803, 0xff) connect$unix(r9, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r9) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r11 = socket(0x2, 0x803, 0xff) connect$unix(r11, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r11) connect$unix(r11, &(0x7f0000000340)=@file={0x2, './file0\x00'}, 0x6e) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1, &(0x7f00000004c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='ar\x00'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x40}}, {@max_read={'max_read', 0x3d, 0xd3d}}], [{@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt={'fowner>', r10}}]}}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) [ 288.667319][T12096] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 10:56:31 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100303afffe8000000000000070c780c5033fe62900000000000000aaff020000000000000000000200000001860090780007080060c5961e000000000104000025000000180300000500000111050000000000000000000000000001"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) sendfile(r0, r1, &(0x7f0000000000)=0x2b, 0x5) [ 288.762629][T12102] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 288.809056][T12106] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 288.833027][T12107] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 288.892878][T12106] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 10:56:32 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) socket$inet(0x2, 0x2, 0xd9) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00dc00c27904a1da9b2980ff8349c927af938c0000000000000000"], 0xb107) write(r1, &(0x7f0000000100)="06f3db944499c6194c217ddba849f4ad3aee6695bfcdc8d5660f196a8728f41cd975aa7b5a88e5591e1dfc81eae1567817d37be42e4ccec8932480f41df54e2ebe258f016f3fa67bae71bc8dd73d807195bc930829213077cc153122272a272707060886c5fd10f79cdf3fef896bf874cac028570a06f8919021e0f3d35a565a066249c0295dd881f4b6ce0744ab7125fd", 0xffffffffffffff51) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xaa, 0x0, &(0x7f0000000000)) 10:56:32 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 289.148366][T12116] sctp: [Deprecated]: syz-executor.0 (pid 12116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.148366][T12116] Use struct sctp_sack_info instead [ 289.181449][T12117] skbuff: bad partial csum: csum=33023/33609 headroom=64 headlen=1098 [ 289.217090][T12120] sctp: [Deprecated]: syz-executor.0 (pid 12120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.217090][T12120] Use struct sctp_sack_info instead 10:56:32 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 289.323310][T12126] sctp: [Deprecated]: syz-executor.0 (pid 12126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.323310][T12126] Use struct sctp_sack_info instead 10:56:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x3) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x7, &(0x7f0000000000), 0x0) 10:56:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) fsync(r7) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r8, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x118, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r10, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_PORT_SELF={0x80, 0x19, [@IFLA_PORT_PROFILE={0x10, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '[!,\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x80}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'eth1\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0xf7}, @IFLA_PORT_PROFILE={0x14, 0x2, 'selfvboxnet0,!^\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f7b939cc65e09df058923f6baacef450"}]}]}, 0x118}}, 0x0) 10:56:32 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 10:56:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r0 = open(&(0x7f0000000040)='\x00', 0x404080, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 10:56:32 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0x53, 0xac, 0x69, 0x10, 0x1608, 0x4, 0x4085, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x3, 0x83, 0x6f, 0xbd, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 289.708861][T12144] sctp: [Deprecated]: syz-executor.0 (pid 12144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.708861][T12144] Use struct sctp_sack_info instead [ 289.732874][T12143] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 10:56:32 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 10:56:32 executing program 2: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r5, {}, {0x0, 0x2}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r5}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10001) creat(&(0x7f0000002440)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10001) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xfb3f) [ 289.919147][T12158] sctp: [Deprecated]: syz-executor.0 (pid 12158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.919147][T12158] Use struct sctp_sack_info instead [ 290.033312][ T2973] usb 4-1: new high-speed USB device number 2 using dummy_hcd 10:56:33 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) [ 290.203611][T12164] sctp: [Deprecated]: syz-executor.0 (pid 12164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.203611][T12164] Use struct sctp_sack_info instead [ 290.271880][ T2973] usb 4-1: Using ep0 maxpacket: 16 10:56:33 executing program 2: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000f9b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000735000/0x1000)=nil) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0x8, "48a826902c05ed783c131d62e7c0d56a4b12725e089c8626afb96b80005fe6bf998ae925d9df2e4877f3c127afc200f95baef1b6c9415d9ccd614ad3a778f817"}) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0xf1, 0x0) [ 290.392026][ T2973] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 290.400359][ T2973] usb 4-1: config 0 has no interface number 0 [ 290.407024][ T2973] usb 4-1: config 0 interface 60 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.418138][ T2973] usb 4-1: config 0 interface 60 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.428050][ T2973] usb 4-1: config 0 interface 60 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 290.438296][ T2973] usb 4-1: New USB device found, idVendor=1608, idProduct=0004, bcdDevice=40.85 [ 290.447546][ T2973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.463645][ T2973] usb 4-1: config 0 descriptor?? 10:56:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) fsync(r7) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r8, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x118, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r10, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_PORT_SELF={0x80, 0x19, [@IFLA_PORT_PROFILE={0x10, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '[!,\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x80}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'eth1\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0xf7}, @IFLA_PORT_PROFILE={0x14, 0x2, 'selfvboxnet0,!^\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f7b939cc65e09df058923f6baacef450"}]}]}, 0x118}}, 0x0) [ 290.504393][ T2973] io_edgeport 4-1:0.60: Edgeport 4 port adapter converter detected [ 290.513288][ T2973] usb 4-1: detected 10:56:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, 0x3, 0x9, 0x4, 0x31, "b280d9556b9f25a8dc7ff80ae74ae0bb32d08e2e072833218b182890a2aa1c56df360af9ebc2b658091ed1c1fcaa0b94dd"}, 0x3d) r2 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="99e996a80d77856439b0149427cc529c3e208722597a2182278982a8036339ec8e48f8b5dad4ba789ef59d23e8ac3efd6da9c626ac", 0x35, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={0x0, r2, r3}, &(0x7f0000000240)=""/122, 0x7a, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000300)={0x205c97b46e0d041d, 0x1, 0x40, 0x0, 0x6}) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10, 0x8dd1c3549e52616) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000400)=0x2, 0x4) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/snapshot\x00', 0x4301, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x404600}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x12058005}, 0x800) fcntl$setpipe(r0, 0x407, 0x7fffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/autofs\x00', 0x14000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001e80)=@filter={'filter\x00', 0xe, 0x1, 0x1d6, [0x0, 0x20001c80, 0x20001cb0, 0x20001ce0], 0x0, &(0x7f0000001c40), &(0x7f0000001c80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0xe0989b487c007e01, 0x8847, 'vlan0\x00', 'hwsim0\x00', 'batadv0\x00', 'ip6_vti0\x00', @dev={[], 0x18}, [0x80, 0x0, 0x0, 0x7f, 0xff], @remote, [0x78bf5cff72e725be, 0x0, 0x0, 0x0, 0x101, 0x1fe], 0xce, 0xce, 0x116, [@arp={'arp\x00', 0x38, {{0x30b, 0x125c, 0x4, @remote, 0xff000000, @rand_addr=0x6, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}, [0x0, 0xff, 0x1fe, 0xff], @remote, [0xff, 0xff, 0x7f, 0x7f], 0x683a9936f8015fa4, 0x20}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"118380aa87f00b0d4fa6eea6cc134c25afcdfb5e8cf4d277cb071e890fb5"}}}]}]}, 0x24e) write$P9_RFSYNC(r0, &(0x7f0000001f00)={0x7, 0x33, 0x1}, 0x7) select(0x40, &(0x7f0000001f40)={0x8, 0x5, 0x7, 0x6, 0x9, 0x7, 0x2}, &(0x7f0000001f80)={0x2833, 0x2, 0x100, 0x0, 0x8, 0x7, 0x3f, 0x3}, &(0x7f0000001fc0)={0x5, 0x7fffffff, 0x7f, 0x9, 0x4, 0x3, 0x0, 0x9}, &(0x7f0000002000)={0x0, 0x7530}) r9 = syz_open_dev$evdev(&(0x7f0000002040)='/dev/input/event#\x00', 0x7, 0x40000) ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000002080)=""/158) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002140), 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x49810}, 0x4000) r11 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002280)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f00000022c0)=0x2) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000002300)={0x28, {{0x2, 0x4e22, @multicast1}}, 0x3, 0x2, [{{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @multicast2}}]}, 0x190) r12 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) getsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f00000024c0), &(0x7f0000002500)=0x4) r13 = syz_open_dev$adsp(&(0x7f0000002540)='/dev/adsp#\x00', 0x25, 0x40) ioctl$FS_IOC_GETVERSION(r13, 0x80087601, &(0x7f0000002580)) [ 290.689243][T12175] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 290.852661][ T2973] usb 4-1: error in getting manufacturer descriptor: -32 [ 290.873086][ T2973] usb 4-1: error in getting boot descriptor: -32 [ 290.879623][ T2973] usb 4-1: Device Reported 0 serial ports vs. core thinking we have 4 ports, email greg@kroah.com this information. [ 290.893102][ T2973] usb 4-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 290.901924][ T2973] usb 4-1: Failed to load image "edgeport/down.fw" err -2 [ 290.909865][ T2973] usb 4-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 290.918658][ T2973] usb 4-1: Failed to load image "edgeport/boot.fw" err -2 10:56:34 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) [ 291.024489][ T2973] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB0 [ 291.089231][ T2973] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB1 [ 291.125934][ T2973] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB2 [ 291.185139][T12183] sctp: [Deprecated]: syz-executor.0 (pid 12183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.185139][T12183] Use struct sctp_sack_info instead [ 291.245296][ T2973] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB3 10:56:34 executing program 2: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000f9b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000735000/0x1000)=nil) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0x8, "48a826902c05ed783c131d62e7c0d56a4b12725e089c8626afb96b80005fe6bf998ae925d9df2e4877f3c127afc200f95baef1b6c9415d9ccd614ad3a778f817"}) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0xf1, 0x0) [ 291.324881][ T2973] usb 4-1: USB disconnect, device number 2 [ 291.351835][ T2973] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0 [ 291.416751][ T2973] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1 [ 291.465754][ T2973] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2 [ 291.495692][T12195] IPVS: ftp: loaded support on port[0] = 21 [ 291.524445][ T2973] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3 [ 291.535528][ T2973] io_edgeport 4-1:0.60: device disconnected 10:56:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x803, 0xff) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r3) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) bind$packet(r2, &(0x7f0000000200)={0x11, 0x8, r4, 0x1, 0x6, 0x6, @random="64d96260318e"}, 0x14) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000240)=""/87}, {&(0x7f00000002c0)=""/194}, {&(0x7f00000003c0)=""/19}, {&(0x7f0000000400)=""/3}, {&(0x7f0000000440)=""/221}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/39}, {&(0x7f0000001400)=""/4096}, {&(0x7f00000005c0)=""/201}, {&(0x7f00000006c0)=""/52}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r5, 0x2e}}, 0x10) [ 291.973484][T12195] chnl_net:caif_netlink_parms(): no params data found [ 292.010499][T12198] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=syz1,mems_allowed=0-1 [ 292.025257][T12198] CPU: 1 PID: 12198 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 292.032442][ T2973] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 292.033196][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.050724][T12198] Call Trace: [ 292.054190][T12198] dump_stack+0x191/0x1f0 [ 292.058622][T12198] warn_alloc+0x4e4/0x710 [ 292.063055][T12198] __alloc_pages_nodemask+0x5ca0/0x5fa0 [ 292.068757][T12198] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 292.074880][T12198] ? cpuset_nodemask_valid_mems_allowed+0x5b/0xd0 [ 292.081322][T12198] alloc_pages_current+0x68d/0x9a0 [ 292.086538][T12198] ion_page_pool_alloc+0x6db/0x830 [ 292.091673][T12198] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 292.097596][T12198] ion_system_heap_allocate+0x47f/0x1400 [ 292.103318][T12198] ? ion_system_contig_heap_create+0x210/0x210 [ 292.109484][T12198] ion_ioctl+0x775/0x2250 [ 292.113871][T12198] ? debug_shrink_set+0x220/0x220 [ 292.118911][T12198] do_vfs_ioctl+0xea8/0x2c50 [ 292.123540][T12198] ? security_file_ioctl+0x1bd/0x200 [ 292.128848][T12198] __se_sys_ioctl+0x1da/0x270 [ 292.133556][T12198] __x64_sys_ioctl+0x4a/0x70 [ 292.138164][T12198] do_syscall_64+0xbc/0xf0 [ 292.142633][T12198] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.148539][T12198] RIP: 0033:0x459a29 [ 292.152455][T12198] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.172073][T12198] RSP: 002b:00007f7b75eb4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.180498][T12198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 292.188478][T12198] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 292.196461][T12198] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 292.204457][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b75eb56d4 [ 292.212439][T12198] R13: 00000000004c2705 R14: 00000000004d5e20 R15: 00000000ffffffff [ 292.221166][T12198] Mem-Info: [ 292.224472][T12198] active_anon:105978 inactive_anon:194 isolated_anon:0 [ 292.224472][T12198] active_file:7525 inactive_file:32583 isolated_file:0 [ 292.224472][T12198] unevictable:0 dirty:125 writeback:0 unstable:0 [ 292.224472][T12198] slab_reclaimable:4655 slab_unreclaimable:10816 [ 292.224472][T12198] mapped:50034 shmem:253 pagetables:962 bounce:0 [ 292.224472][T12198] free:748592 free_pcp:268 free_cma:0 [ 292.262849][T12198] Node 0 active_anon:423912kB inactive_anon:776kB active_file:29964kB inactive_file:130232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200136kB dirty:496kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 292.295121][T12198] Node 0 DMA free:13928kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.322144][T12198] lowmem_reserve[]: 0 2738 3428 3428 [ 292.327497][T12198] Node 0 DMA32 free:41724kB min:38652kB low:48312kB high:57972kB active_anon:414964kB inactive_anon:24kB active_file:14592kB inactive_file:120416kB unevictable:0kB writepending:440kB present:3129332kB managed:2809036kB mlocked:0kB kernel_stack:3584kB pagetables:3200kB bounce:0kB free_pcp:1060kB local_pcp:0kB free_cma:0kB [ 292.358260][T12198] lowmem_reserve[]: 0 0 690 690 [ 292.363285][T12198] Node 0 Normal free:12236kB min:11788kB low:14220kB high:16652kB active_anon:8948kB inactive_anon:752kB active_file:15372kB inactive_file:9036kB unevictable:0kB writepending:56kB present:786432kB managed:706752kB mlocked:0kB kernel_stack:12864kB pagetables:648kB bounce:0kB free_pcp:1276kB local_pcp:0kB free_cma:0kB [ 292.393272][T12198] lowmem_reserve[]: 0 0 0 0 [ 292.397846][T12198] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 13952kB [ 292.412122][T12198] Node 0 DMA32: 504*4kB (UME) 52*8kB (UME) 33*16kB (UME) 16*32kB (UME) 13*64kB (UME) 4*128kB (UM) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 8*4096kB (M) = 44752kB [ 292.429860][T12198] Node 0 Normal: 580*4kB (UME) 169*8kB (UME) 47*16kB (UME) 50*32kB (UME) 13*64kB (ME) 17*128kB (UME) 8*256kB (UME) 4*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 14152kB [ 292.447039][T12198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.456739][T12198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.466159][T12198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 10:56:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000006a0adcff00d6ec22f05632c7788332ee"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x60, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x70) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket(0x80000009, 0x400000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$caif_stream(0x25, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x145) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xbf) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffffd7) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffffd, 0x40000007fff, 0x7ffffffe}, 0x14) shutdown(r2, 0x2) 10:56:35 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) [ 292.475841][T12198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.485220][T12198] 39490 total pagecache pages [ 292.489936][T12198] 0 pages in swap cache [ 292.494225][T12198] Swap cache stats: add 0, delete 0, find 0/0 [ 292.500324][T12198] Free swap = 0kB [ 292.504124][T12198] Total swap = 0kB [ 292.507912][T12198] 1965979 pages RAM [ 292.511816][T12198] 0 pages HighMem/MovableOnly [ 292.516520][T12198] 330656 pages reserved [ 292.520695][T12198] 0 pages cma reserved [ 292.561943][ T2973] usb 4-1: Using ep0 maxpacket: 16 [ 292.597644][T12205] sctp: [Deprecated]: syz-executor.0 (pid 12205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.597644][T12205] Use struct sctp_sack_info instead [ 292.600801][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.621703][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.630712][T12195] device bridge_slave_0 entered promiscuous mode [ 292.693957][ T2973] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 292.702472][ T2973] usb 4-1: config 0 has no interface number 0 [ 292.707163][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.708639][ T2973] usb 4-1: config 0 interface 60 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.708721][ T2973] usb 4-1: config 0 interface 60 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.715906][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.726981][ T2973] usb 4-1: config 0 interface 60 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 292.738073][T12195] device bridge_slave_1 entered promiscuous mode [ 292.743771][ T2973] usb 4-1: New USB device found, idVendor=1608, idProduct=0004, bcdDevice=40.85 [ 292.769033][ T2973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.852854][ T2973] usb 4-1: config 0 descriptor?? 10:56:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x802) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000200)={0x7, 0x6c5, 0x4, 0x8813}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x7f83701a) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40400, 0x0) r3 = socket(0x8ed45bee11f10474, 0x803, 0x8) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r3) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) write$FUSE_ATTR(r2, &(0x7f0000000040)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}}, 0x78) 10:56:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400020000000000"], 0x2c}}, 0x0) 10:56:35 executing program 2: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x101100) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000000c0)={0x6}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) geteuid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x165) sendfile(r1, r2, 0x0, 0x20000102000007) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) [ 292.915837][ T2973] usb 4-1: can't set config #0, error -71 [ 292.941026][ T2973] usb 4-1: USB disconnect, device number 3 [ 292.975836][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.011841][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:56:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x0, 0x8000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r1, &(0x7f0000000340), 0x3d15, 0x57, 0x0, 0x0) [ 293.046792][T12195] team0: Port device team_slave_0 added [ 293.058116][T12195] team0: Port device team_slave_1 added [ 293.137167][T12195] device hsr_slave_0 entered promiscuous mode [ 293.193182][T12195] device hsr_slave_1 entered promiscuous mode [ 293.234125][T12195] debugfs: Directory 'hsr0' with parent '/' already present! 10:56:36 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) close(r0) [ 293.519716][T12195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.554743][T12234] sctp: [Deprecated]: syz-executor.0 (pid 12234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.554743][T12234] Use struct sctp_sack_info instead 10:56:36 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) close(r0) [ 293.640998][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.649956][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.665853][T12195] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.725461][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.734850][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.744123][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.751307][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.760092][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.769804][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.777162][T12238] sctp: [Deprecated]: syz-executor.0 (pid 12238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.777162][T12238] Use struct sctp_sack_info instead [ 293.778793][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.802320][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.866694][T12195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.877646][T12195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.920118][T12195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.942233][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.951027][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.960974][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.971638][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.981915][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.992331][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.002126][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.029675][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.038479][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:56:37 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x7000, 0x4) close(r0) 10:56:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)=0x1) syz_open_dev$sndctrl(&(0x7f00000003c0)='/dev/snd/controlC#\x00', 0x6, 0x20082) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xd8b40cf96162586d, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000400)=0x30) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000480)={0x8, 0x0, [{0x5, 0x2dd8494f003ab0e4, 0x0, 0x0, @irqchip={0x1, 0x3}}, {0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x6}}, {0x200, 0x3, 0x0, 0x0, @adapter={0x600000000, 0x4, 0x1, 0x23, 0x80000001}}, {0x10001, 0x3, 0x0, 0x0, @adapter={0x3, 0x4, 0x55, 0x3ff, 0x9}}, {0x8, 0x2, 0x0, 0x0, @sint={0xe3, 0x20}}, {0xee, 0x2, 0x0, 0x0, @irqchip={0x5}}, {0x5, 0x1, 0x0, 0x0, @sint={0x0, 0x5}}, {0x6a5, 0x1, 0x0, 0x0, @msi={0x200, 0xe8e, 0x1}}]}) r6 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000240)={0x627, 0x7f, 0x5d, 'queue0\x00', 0xeffffe00}) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e21d1e5e00000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800"/192]) 10:56:37 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x78, 0x4) r1 = socket(0x2, 0x803, 0xff) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r1) r2 = socket(0x2, 0x803, 0xff) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0xffffffffffffff50) r3 = semget(0x0, 0x4, 0x400) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x90200, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000140)={0x1000, 0x3, 0x8, 0x2, 0x7, 0x6, 0xe}) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000080)=""/72) 10:56:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_PMTUDISC={0x8}]]}}}]}, 0x44}}, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) ioprio_get$pid(0x2, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000200)={0x1000, &(0x7f00000001c0), 0xc, r1, 0xe}) [ 294.527550][T12257] sctp: [Deprecated]: syz-executor.0 (pid 12257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.527550][T12257] Use struct sctp_sack_info instead 10:56:37 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x3f, 0x70, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xa9, 0x9, 0x4, 0x20, 0x1, 0x8, 0x40, 0x1}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 294.645692][T12264] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 294.654116][T12264] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 10:56:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x31a104664f52955b, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/102) [ 294.697141][T12265] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 294.741306][T12269] sctp: [Deprecated]: syz-executor.0 (pid 12269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.741306][T12269] Use struct sctp_sack_info instead [ 294.743940][T12262] QAT: Invalid ioctl 10:56:37 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 294.967349][T12278] sctp: [Deprecated]: syz-executor.0 (pid 12278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.967349][T12278] Use struct sctp_sack_info instead 10:56:38 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/57, 0x175}], 0x47) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_to_hsr\x00', 0x3}, 0x18) ioprio_set$pid(0x2, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) clone(0xa0020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:56:38 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x903, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 295.216288][T12284] sctp: [Deprecated]: syz-executor.0 (pid 12284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.216288][T12284] Use struct sctp_sack_info instead 10:56:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x0, 0x8000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r1, &(0x7f0000000340), 0x3d15, 0x57, 0x0, 0x0) 10:56:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x200000, 0x0) sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="90115ac3a34bba41f87577facfc192569efa73b1e506e3b7831ad7e820e9f676e153ad9c72ff0398d75f9c789f", 0x2d}, {&(0x7f0000000300)="cd43832d98352c018c752e70ab577066d65db0c270145724ef11f090015cae0214c82eefb6c486b22a930ceaf6319453843e63c257fdbb5cc27ef43be05b63c430fe0226e26c4a32619c164348f18dbaea42dc207b9de98d97f64428956879bb723fd20f5e19d2e8c8cac7f3d5c1c24041936eb7aee23a9a466f054ab99cdcc3493c7bd5b4747652445bcc712290a43a305d1e9f7d06454f19a6249129b8167b54da3ea54d490561c0f2e543a43ac56e2170c33343509e6aa0da97cda062a921488a6a06edc3de71da19d223747c75d4215bd92f8fb58f", 0xd7}, {&(0x7f0000000400)="033a088f232eb3e8ce1f01462f13dc2b72ee46edd2d5bb6e230ecf1d79161c62af9bd685e3ecd0f2c32b4256631af6f4c8", 0x31}, {&(0x7f0000000440)="1521b337e58f503cb2b49b72c641c419ac9430674d1bcab0c8e1ea9b597c231498715dc576ac69eaa070348861ec2870072d98eaa8af1fa2d169c487f66a950128244b10ef94daa1bee2cd49a39c1c3859809fe9a021599be8f422acf9dc211d4b1d4babee4032c049f85bd0f7716b773f508b14f7959a78df56b8e062c4fff0b52522e464622d2b525d750ce3fceff1ea8f7423f6c0767c7cfcfb5e94605997aa0d6ba6bda2df3fd1609971972a09f3d44560b18f0be987954b95a0b0bf6a19809e", 0xc2}], 0x4, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x4004001}, 0xc002) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x79) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800100) r4 = socket(0x2, 0x803, 0xff) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "c54e9a7ff18f1e48b54445ac2b00d6279d781ef5abc51f87f222b4270e78021dcb2beb839cac1a8da40fbf669e37e268618f7beed6d2b3bfa4447eac1e2e1773b1f4257de8"}, &(0x7f0000000080)=0x4d) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="0f000000ff24947ebc2affffff6677534ea0f4"], &(0x7f0000000180)=0x17) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:56:39 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 10:56:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00dcd7c279048f1d9298200817efaba1587f30f4f1a00a76dae8649b299bff8349c927af938c"], 0xb107) syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xfccd}, [@mdlm={0x15, 0x24, 0x12, 0x40}]}}}]}}]}}, &(0x7f0000000640)=ANY=[]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:56:39 executing program 1: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000f9ff000000000002000000bd576f61e61ee05b014d55a68a34587d3821e005bf201b9b101a5e12154ec9362eea0108086a9566cb9a3e5f518895891671714323726ebef94171b845fbf2567063f0ea1903604003cc5efbe1914b1d4f7a21fe9052e4a1f177"]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x141082, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000200)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000002c0)='syz1\x00') ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)) r7 = socket(0x2, 0x803, 0xff) connect$unix(r7, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) close(r7) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000300)=@req={0x8, 0x400, 0x8, 0x18}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00'}) [ 296.286207][T12302] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 296.302894][T12303] sctp: [Deprecated]: syz-executor.0 (pid 12303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.302894][T12303] Use struct sctp_sack_info instead [ 296.388078][T12297] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 296.483143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 296.489584][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:56:39 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 296.562512][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 296.568876][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 296.582606][ T3980] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 296.618561][T12309] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 10:56:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x0, 0x8000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r1, &(0x7f0000000340), 0x3d15, 0x57, 0x0, 0x0) 10:56:39 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 296.802538][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 296.808957][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:56:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x0, 0x8000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r1, &(0x7f0000000340), 0x3d15, 0x57, 0x0, 0x0) [ 296.992107][ T3980] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config 10:56:40 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x95a0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 297.173038][ T3980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.182347][ T3980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.190432][ T3980] usb 5-1: Product: syz [ 297.194866][ T3980] usb 5-1: Manufacturer: syz [ 297.199602][ T3980] usb 5-1: SerialNumber: syz 10:56:40 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 297.375934][T12330] sctp: [Deprecated]: syz-executor.0 (pid 12330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.375934][T12330] Use struct sctp_sack_info instead 10:56:40 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 297.583991][ T3980] usb 5-1: bad CDC descriptors 10:56:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x3c0) r1 = syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x1, 0x1ff, 0x9], 0x1}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$apparmor_current(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="70525f726fffb480533b3f3905eb11fabc125e401e39e30fa15a82129a8abc7004da06817f4ba56c71024775afbb5e07da607557b3f8c9dba5726fc6569d756783d6da8fbaf00fa333cd67772e52b14dea44d743ebada38c53915fc840d0a043"], 0xe) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x4}, 0xb2b}}, 0x18) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x15e4) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xeb62, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0xb4e9, r3, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30, 0x7fff}, &(0x7f0000000440)=0x18) connect(r2, &(0x7f0000000540)=@un=@file={0x1, './file0\x00'}, 0x80) r5 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) [ 297.618382][ T3980] usb 5-1: USB disconnect, device number 2 [ 297.757575][T12337] sctp: [Deprecated]: syz-executor.0 (pid 12337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.757575][T12337] Use struct sctp_sack_info instead 10:56:40 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x12d, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0xc1, 0xfe, 0x93, 0x48, 0x2001, 0x3c1c, 0xb460, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11b, 0x2, 0x2, 0x7f, 0x10, 0x1, [{{0x9, 0x4, 0x8f, 0x4a, 0x0, 0xaa, 0x73, 0x5f, 0x6, [@generic={0xf5, 0x8, "8c9e30de4fac1036b1c0d805123dfa39d0205fe57a9aa505b873738c67baeea200cbc38feed74e9256d5a2d5ad1b422062b4e623250b46cf775eb4fa8b502bed7dabd5d25143715d5f0914f23f8629c9d2521d4c3eb61bbbb228992b60646deccc3315d9ce683dee2422dcbb9bea6a5b47ddcadb48e35d656f62bb614cc43e8194da98568f6df46c18ed8d9b82d33d24b31460ec432be8d7c9a785ce174ee71f66a934c1811e6624bd39e1e82ca62e42ca2133e4ab247f7bee132953b5437a6dd89380f4fd203bdfb6b939b90d724d12ddd0fa2574aa2c379698ceebca50dc16108b26a58fe046782b64be8639a74708b90bb6"}]}}, {{0x9, 0x4, 0x4, 0x0, 0x0, 0x24, 0x5c, 0x26, 0x1, [@generic={0x2, 0x3}, @hid_hid={0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0xe40}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0x1f, 0x4a, 0x5469bef6f5c5710e, 0x8}, 0x1107, &(0x7f0000000200)={0x5, 0xf, 0x1107, 0x5, [@generic={0xa0, 0x10, 0x9, "0d46542bc0eb1ca84714f09ec83b7fe8dc05aa836a22d2d0e42b1dbe2ad06302b6ce7adabc1d60ea5a116d00af3fab1089b8cdd7c84449b3306b244ebb4c50e370e815e9ec30e32dd5cfc08006a9e50a28a92941f6664257daf4ab09e5508d07edba08cf8299eb1148c269ee418e9c1d8ff3f4947c70a5331ad5d1044e6a64f3d953ab177bcd790fe61defd580c1036e72fc71c9d92eaff01729614910"}, @generic={0x1003, 0x10, 0x4, "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"}, @ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0x0, 0x6fabc12d449c0347, 0xfc, [0x30, 0xff7e30, 0xffbe1e, 0xc000, 0xc0, 0x3f00]}, @generic={0x38, 0x10, 0xa, "ca33ea03c0641b52d6ee7e15a30af5ffea9c4391493ed209a4317e72b4864d0dac47511b8001df3c9fd70b45987da5c4a3dd252834"}, @ptm_cap={0x3}]}, 0x6, [{0xaf, &(0x7f0000001340)=@string={0xaf, 0x3, "fb53fce8facbc711645a1da0d9a5847a778ca901aec42c533d6f0ecbf842a99c91311cfc5a5514014de5accc144136324ddefd51ccc74c45ea0b84145724750d56d0b31f02bd9962ed838e4bb973b822e2f62545d173a07e8e5c7c5377414c602d2111eb6c65b9fefb6e3271c3f05f99ce70137510cb3ee8eb6023009e7e624cee3d9362ac9b6141e59ca3e49861755dfc2a31abb78ca649187b4e3aec2628751c13dbdd58e49cacf08664d375"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x330e01b5b0e381b8}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x8a, &(0x7f0000001500)=@string={0x8a, 0x3, "32ee478bfdad8681f8c4d1f210fb6f96dc35f9e148a41f5d304568f0c6b5ab04421d2ec7a5123ed9ed6860be6d3d96099324a075268dbf51da3a11d274698213aa6872efeb50755e5ac1128dc46d30abb51a7616eea26adde69a0c760dd806a634d72fd320755a0a7012f5987bb5c7bd12e0858176933b5b7c347beed18358ed43beb1c0a4108905"}}]}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, &(0x7f0000004000), 0x2, 0x0, &(0x7f0000002000), 0x10) 10:56:41 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 298.055552][T12302] skbuff: bad partial csum: csum=8200/6127 headroom=64 headlen=3712 [ 298.084761][T12347] sctp: [Deprecated]: syz-executor.0 (pid 12347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.084761][T12347] Use struct sctp_sack_info instead [ 298.263955][ T3980] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 298.443679][T11914] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 298.552186][ T3980] usb 3-1: device descriptor read/64, error 18 [ 298.862159][T11914] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 298.951944][ T3980] usb 3-1: device descriptor read/64, error 18 [ 299.032096][T11914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.042688][T11914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.050946][T11914] usb 5-1: Product: syz [ 299.055655][T11914] usb 5-1: Manufacturer: syz [ 299.060789][T11914] usb 5-1: SerialNumber: syz [ 299.222001][ T3980] usb 3-1: new high-speed USB device number 5 using dummy_hcd 10:56:42 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x20) getrandom(&(0x7f0000000000)=""/204, 0xcc, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/244, 0xf4, 0x40010101, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='mem\x00\x00\x00\x00\x00\x00\a\x13Be\x89\xa9\x05\x1d\x86\xdc\xab\xf9\xf0|\xdc*x\xa4u\x9e\xbbNi\xbaL\r:R\f~\x88\xc8\xc1M-\x8d\x1aa\x93B\xa1\xfc}\xc4`\xf6f\x87\x0e\x13-\x89\x90|\x90\xde\x8c4!\x97\"U\xa5\x87\xca9\xda\xe8\x88\xf97\t\xe8\x88\x94\xb7\x04\xaeG\xf0\xff\x00\x00\x00\x00\x00\x00\x00\x8bcmE\xa7G\xa1\xca$+\xa5\xcb\xbcEir\x8e\xa5\x02\x007%\xd6\x02\xe5\x9d\x94\'\x1d\xa6\xfc\xc7\x06Ug\x97|\xef\xf7\xca\xe5\xee\x8b}\x8eA\xa5\x8c\xe2\xf4\xe8]{\t\x98\xf2Q\x95\xf2r\x14\xbd\xe1\x06#\xe4o\x00.\xc6H)\xf4\xf6u\xfa\xd0\xf0Q8\x89\xf7~2\xcc\x87\xa3Y\xdd\xfa\x13Q\xb6\xb8\x82\xad\xe3\xe81\x03\xc7w\xcd\x11A1D\'1BZ\xb8\xc6\x18u\xa2\xd8\xd7\xc5\xd6\xa9]\xab\x038e\xdf\xf6\xcd', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0xfebfffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r3, 0x0, 0x0, 0xfebfffff) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x8, 0x2, 0x1}}, 0x14) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup2(r1, r2) 10:56:42 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x9, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x10002, 0x0) bind$netlink(r3, &(0x7f00000013c0)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x38, @dev={0xfe, 0x80, [], 0xb}, 0x4}, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}, 0x401, [0xd9b1, 0x1000, 0x8, 0x10000, 0x1, 0x5, 0xfffffffffffff800]}, 0x5c) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0x14, r4, 0x5, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000102}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0), 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") 10:56:42 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 10:56:42 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x525a, 0x2040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x4, @local, 0x5}}, 0x2, 0x80, 0x6, 0x2, 0x3}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x7, 0x1ff, 0x0, 0x9, 0x9}, &(0x7f0000000180)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xd) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x2, 0x20081) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000240)=0x400) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000003c0)={0x0, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @local}}}, 0x108) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x70f1e7bd2c94bd92, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x34) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0x2, 0x9, 0x0, 0x6}, 0x1c, [0x81, 0x9, 0x4, 0x7, 0xfffffffb, 0xfffffff7, 0x51, 0x5, 0x4, 0x6, 0x0, 0x7, 0x124, 0x3000, 0x5, 0x5, 0xffff, 0xffffff07, 0xc4fe, 0xf1a, 0xffffffe1, 0xfffffffb, 0x9, 0x6c, 0x80, 0x3f, 0x3ff, 0x6, 0x8, 0xd6, 0x101, 0x100, 0x20, 0x2, 0x9, 0xb7cd, 0x8, 0x2, 0x7, 0x8, 0x7fff, 0x4, 0x6, 0x4, 0x6, 0x10001, 0x5526281, 0xfffffffb, 0x2, 0x3, 0x5, 0x1, 0x18b9, 0xfff, 0x8f07, 0x6, 0x2, 0x9, 0xae, 0x7fff, 0x800, 0xb94a, 0x4, 0x1], [0x80, 0xfff, 0x2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x0, 0x7, 0x23, 0x7, 0x20, 0x200, 0xffffffc0, 0x7, 0x800, 0x0, 0x70, 0x5, 0x7f, 0x8, 0x2, 0x8, 0x3, 0x3, 0x6, 0x6, 0x1, 0x1ff, 0x8, 0x9, 0x1, 0x7, 0x0, 0x8, 0xfffffff8, 0x7, 0xfff, 0x5, 0x4, 0x5, 0x0, 0x400, 0x4000, 0x5, 0xfffffffa, 0xd46a, 0x1ff, 0x80, 0x0, 0x8, 0xd79f, 0x851, 0x9bb, 0xffffd024, 0x80, 0x1, 0xffffffff, 0x400, 0x32000, 0x3f, 0xfff, 0xd4b9], [0x0, 0xa3, 0x2, 0x3, 0x7, 0x6, 0x0, 0x4, 0x8, 0xffffffff, 0x8001, 0x6, 0x300000, 0x4, 0x140f, 0x2, 0x5, 0x1, 0x5, 0x18c1, 0x2848, 0x2, 0x4b1, 0x80000000, 0x2, 0x2, 0x8001, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0x7fffffff, 0xad9, 0x1, 0xb, 0x3, 0xffff, 0x10000, 0xffffff07, 0x8, 0x0, 0x13, 0x7, 0x8, 0x2, 0x8, 0x1190, 0x7a0e, 0x6, 0xffffffff, 0x1, 0x0, 0x44791f62, 0x9, 0xb39, 0x200, 0x335, 0x7436, 0x4, 0x1, 0x3, 0x4], [0x3, 0xfffffffd, 0x5, 0x6, 0x1, 0x32a, 0x8, 0xf67, 0x40, 0x7, 0xde1, 0x0, 0x8e8, 0x3, 0xdc, 0x6, 0x10001, 0x2, 0x80, 0x4, 0xe96, 0x6, 0xffff, 0x6, 0x5, 0x6, 0x0, 0x5, 0xb1, 0x1b, 0x0, 0x1ff, 0x0, 0x480, 0x80000001, 0x4, 0x8000, 0x8, 0x2, 0x1, 0x1, 0x3, 0x7, 0xfffffff7, 0x8, 0x6b0, 0x4, 0xe89, 0xfffff000, 0x1, 0x5, 0x7, 0x80000000, 0xf8d, 0xd88c, 0x7, 0x8, 0x8, 0x3, 0x3ff, 0x3, 0x3, 0x1, 0x9]}, 0x45c) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/audio\x00', 0x20000, 0x0) recvfrom$inet(r7, &(0x7f0000000a00)=""/103, 0x67, 0x2140, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000ac0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b40)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000a80)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000b80)='ns\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000bc0)={0x0, 0x180000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000c00)={r10, 0x0, r5}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r9, 0x40405514, &(0x7f0000000c40)={0x2, 0x0, 0x3, 0x3ff, 'syz0\x00', 0x3f}) fgetxattr(r9, &(0x7f0000000c80)=@known='trusted.overlay.upper\x00', &(0x7f0000000cc0)=""/49, 0x31) r11 = syz_open_procfs(r3, &(0x7f0000000d00)='attr/prev\x00') ioctl$VIDIOC_ENCODER_CMD(r11, 0xc028564d, &(0x7f0000000d40)={0x3, 0x1, [0x1, 0x7, 0x2, 0x0, 0x80, 0x4, 0x401, 0xffffff7f]}) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) r13 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/qat_adf_ctl\x00', 0x88441, 0x0) renameat(r12, &(0x7f0000000dc0)='./file0\x00', r13, &(0x7f0000000e40)='./file0\x00') ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000e80)) fsetxattr$trusted_overlay_nlink(r11, &(0x7f0000000ec0)='trusted.overlay.nlink\x00', &(0x7f0000000f00)={'U-', 0xa0}, 0x28, 0x1) 10:56:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(0x0, 0x0, 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000240)=@v2={0x5, 0x3, 0x11, 0x5, 0x7f, "c6ca4c19ff53be4e12eb2a36dabbbb874c3ebe73bafd156f25a9bafd120b093e82b7aa9c3ef19b81f9c28a9ec23e1c8f440909248dd8c50c3a16d90f21fcf7da4d1120866aa5bad648416f514a1f84da64a4fd36e52e4c4cd7b695ab352b640ba9981ebb06ef57a430bd6fbe54786872cb8fed6c2b858cc4dff3d4ae2e6c56"}, 0x89, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) syz_emit_ethernet(0x300502, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) [ 299.284384][T11914] usb 5-1: bad CDC descriptors [ 299.295593][T11914] usb 5-1: USB disconnect, device number 3 [ 299.359289][T12352] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 299.377788][T12358] sctp: [Deprecated]: syz-executor.0 (pid 12358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.377788][T12358] Use struct sctp_sack_info instead [ 299.488930][T12352] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 299.522997][ T3980] usb 3-1: device descriptor read/64, error 18 10:56:42 executing program 4: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x4a4900) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hiddev(&(0x7f0000000180)='ev\x02\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\xf2\x00', 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x10001, 0x1) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(0xffffffffffffffff, &(0x7f0000000080)=""/154, 0x9a) read$hidraw(0xffffffffffffffff, &(0x7f0000000500)=""/222, 0xde) read$hiddev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000001300)) read$hidraw(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x100) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1d7fd684c2cd6bc887e3494d73cd8020ce5c133ff380820a9812e67086f723924d0b2584dbd56e9d49a7a7f62b0a23a87efcf36b25e00c4f4f597a4ec643d2", 0x3f) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) r3 = syz_open_dev$hidraw(0x0, 0x1, 0x2246) read$hidraw(r3, &(0x7f0000001080)=""/149, 0x95) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x800004080001) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000400)=""/232) ioctl$HIDIOCAPPLICATION(r4, 0x40305828, 0x400007) write$hidraw(0xffffffffffffffff, 0x0, 0x0) 10:56:42 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 10:56:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) creat(0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpgid(0x0) ptrace$getsig(0x4202, 0x0, 0x7, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) [ 299.813273][T12375] sctp: [Deprecated]: syz-executor.0 (pid 12375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.813273][T12375] Use struct sctp_sack_info instead [ 299.923271][ T3980] usb 3-1: device descriptor read/64, error 18 10:56:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r2, 0x4068aea3, 0x0) 10:56:43 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 300.042752][ T3980] usb usb3-port1: attempt power cycle [ 300.177042][T12386] sctp: [Deprecated]: syz-executor.0 (pid 12386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.177042][T12386] Use struct sctp_sack_info instead [ 300.438258][T12391] IPVS: ftp: loaded support on port[0] = 21 [ 300.591699][T12391] chnl_net:caif_netlink_parms(): no params data found [ 300.634213][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.643047][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.651543][T12391] device bridge_slave_0 entered promiscuous mode [ 300.661624][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.669835][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.678735][T12391] device bridge_slave_1 entered promiscuous mode [ 300.704408][T12391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.716658][T12391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.744762][T12391] team0: Port device team_slave_0 added [ 300.754483][T12391] team0: Port device team_slave_1 added [ 300.792001][ T3980] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 300.815907][T12391] device hsr_slave_0 entered promiscuous mode [ 300.872848][T12391] device hsr_slave_1 entered promiscuous mode [ 300.911959][T12391] debugfs: Directory 'hsr0' with parent '/' already present! [ 300.936668][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.944864][T12391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.953194][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.960737][T12391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.024378][T12391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.040959][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.051413][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.061337][T11914] bridge0: port 2(bridge_slave_1) entered disabled state 10:56:44 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) open(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) creat(0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x4c03, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpgid(0x0) ptrace$getsig(0x4202, 0x0, 0x7, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20, 0x4}, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) 10:56:44 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 10:56:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_CAPBSET_DROP(0x18, 0x0) 10:56:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000007d000/0x4000)=nil, 0x4000, 0x2, 0x8132, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 301.078178][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 301.100319][ T3980] usb 3-1: device descriptor read/64, error 18 [ 301.154587][T12391] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.166905][T12401] sctp: [Deprecated]: syz-executor.0 (pid 12401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.166905][T12401] Use struct sctp_sack_info instead [ 301.186485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.196090][ T17] bridge0: port 1(bridge_slave_0) entered blocking state 10:56:44 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x67, 0xb7, 0x8, 0x1a79, 0x6001, 0x956f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x2, 0x8f, 0x92, 0xcd, 0x0, [], [{{0x9, 0x5, 0x8f}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x7f}}]}}]}}]}}, 0x0) [ 301.203531][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.294523][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.304436][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.311612][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.366340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.376590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.391284][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.451281][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.482751][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.498985][T12391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.550279][T12391] 8021q: adding VLAN 0 to HW filter on device batadv0 10:56:44 executing program 5: socket(0x2, 0xc003, 0x0) 10:56:44 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x0, 0x8a42) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCAPPLICATION(r0, 0x6611, 0x0) 10:56:44 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x4a4900) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hiddev(&(0x7f0000000180)='ev\x02\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\xf2\x00', 0x0, 0x800) read$hidraw(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x10001, 0x1) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(0xffffffffffffffff, &(0x7f0000000080)=""/154, 0x9a) read$hidraw(r2, 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000001300)) read$hidraw(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000300)={0x0, "1125a13dfbd97949d8890eb42438d47731b00aa5e3eeb9b0babb4227e41a8e5a61e04d16fe574944e2b2b73bdb0e22e0ed05e719502d78498feff55bd87c803f"}) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="1d7fd684c2cd6bc887e3494d73cd8020ce5c133ff380820a9812e67086f723924d0b2584dbd56e9d49a7a7f62b0a23a87efcf36b25e00c4f4f597a4ec643d2", 0x3f) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) r4 = syz_open_dev$hidraw(0x0, 0x1, 0x2246) read$hidraw(r4, &(0x7f0000001080)=""/149, 0x95) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x800004080001) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000400)=""/232) ioctl$HIDIOCAPPLICATION(r5, 0x40305828, 0x400007) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) 10:56:44 executing program 2: syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x4c482) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201310020994908ca082000077f0000000109021b00018ff1000009043400019353fa0009050b000000000000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r2, &(0x7f00000002c0)="9e", 0xec00) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) 10:56:44 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) [ 301.692701][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 301.784454][T12428] sctp: [Deprecated]: syz-executor.0 (pid 12428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.784454][T12428] Use struct sctp_sack_info instead 10:56:44 executing program 3: getpid() r0 = msgget$private(0x0, 0x10) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000380)=""/219) open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) 10:56:44 executing program 5: [ 301.952325][ T17] usb 5-1: Using ep0 maxpacket: 8 10:56:45 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 10:56:45 executing program 5: [ 302.072076][ T17] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 302.081122][ T17] usb 5-1: config 0 has no interface number 0 [ 302.087590][ T17] usb 5-1: New USB device found, idVendor=1a79, idProduct=6001, bcdDevice=95.6f [ 302.096946][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.104581][T12446] sctp: [Deprecated]: syz-executor.0 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.104581][T12446] Use struct sctp_sack_info instead 10:56:45 executing program 3: [ 302.180047][ T17] usb 5-1: config 0 descriptor?? 10:56:45 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009050f1f000000000009058703a422020144"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/9, 0x9) syz_usb_disconnect(r0) [ 302.222672][ T3980] usb 3-1: device descriptor read/64, error -71 [ 302.233867][ T17] ftdi_sio 5-1:0.143: FTDI USB Serial Device converter detected [ 302.244018][ T17] usb 5-1: Detected FT-X [ 302.248580][ T17] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 302.256708][ T17] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 302.452119][ T17] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 302.486014][ T17] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 302.494124][ T3980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 302.533539][ T17] ftdi_sio 5-1:0.143: GPIO initialisation failed: -71 [ 302.559457][ T17] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 302.600205][ T17] usb 5-1: USB disconnect, device number 4 [ 302.614695][ T17] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 302.626070][ T17] ftdi_sio 5-1:0.143: device disconnected [ 302.742186][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 302.762170][ T3980] usb 3-1: Using ep0 maxpacket: 8 [ 302.902142][ T3980] usb 3-1: config 143 has an invalid interface number: 52 but max is 0 [ 302.911223][ T3980] usb 3-1: config 143 has no interface number 0 [ 302.918269][ T3980] usb 3-1: New USB device found, idVendor=08ca, idProduct=0020, bcdDevice=7f.07 [ 302.928181][ T3980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.012328][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 303.152546][ T31] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 303.161455][ T31] usb 6-1: config 0 has no interface number 0 [ 303.168164][ T31] usb 6-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 303.179664][ T31] usb 6-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 303.189181][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.201428][ T31] usb 6-1: config 0 descriptor?? [ 303.213070][T11913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 303.222341][ T3980] usb 3-1: string descriptor 0 read error: -71 [ 303.257029][ T3980] aiptek 3-1:143.52: Aiptek using 400 ms programming speed [ 303.266788][ T3980] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:143.52/input/input8 [ 303.280150][ T31] ldusb 6-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 303.352638][ T3980] input: failed to attach handler kbd to device input8, error: -5 [ 303.382719][ T3980] usb 3-1: USB disconnect, device number 7 [ 303.453863][T11913] usb 5-1: Using ep0 maxpacket: 8 [ 303.513768][ T2973] usb 6-1: USB disconnect, device number 2 [ 303.527888][T12454] ===================================================== [ 303.536574][T12454] BUG: KMSAN: uninit-value in __vfs_read+0x1a9/0xc90 [ 303.543810][T12454] CPU: 1 PID: 12454 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 303.551886][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.562407][T12454] Call Trace: [ 303.565742][T12454] dump_stack+0x191/0x1f0 [ 303.570214][T12454] kmsan_report+0x13a/0x2b0 [ 303.572136][T11913] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 303.574934][T12454] __msan_warning+0x73/0xe0 [ 303.583740][T11913] usb 5-1: config 0 has no interface number 0 [ 303.588482][T12454] ld_usb_read+0x872/0xc40 [ 303.594970][T11913] usb 5-1: New USB device found, idVendor=1a79, idProduct=6001, bcdDevice=95.6f [ 303.599360][T12454] ? init_wait_entry+0x190/0x190 [ 303.609309][T11913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.614336][T12454] ? kmalloc_array+0x110/0x110 [ 303.614355][T12454] __vfs_read+0x1a9/0xc90 [ 303.614380][T12454] ? rw_verify_area+0x3a5/0x5e0 [ 303.614418][T12454] vfs_read+0x359/0x6f0 [ 303.641976][T12454] ksys_read+0x265/0x430 [ 303.646258][T12454] __se_sys_read+0x92/0xb0 [ 303.649947][T11913] usb 5-1: config 0 descriptor?? [ 303.652141][T12454] __x64_sys_read+0x4a/0x70 [ 303.652161][T12454] do_syscall_64+0xbc/0xf0 [ 303.652184][T12454] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.652196][T12454] RIP: 0033:0x459a29 [ 303.652211][T12454] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.652219][T12454] RSP: 002b:00007fcd6d057c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.652232][T12454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 303.652240][T12454] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000004 [ 303.652248][T12454] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 303.652256][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd6d0586d4 [ 303.652264][T12454] R13: 00000000004c6e7d R14: 00000000004dc390 R15: 00000000ffffffff [ 303.652311][T12454] kmsan_save_stack_with_flags+0x3a/0x80 [ 303.695109][T11913] ftdi_sio 5-1:0.143: FTDI USB Serial Device converter detected [ 303.697659][T12454] kmsan_alloc_page+0x151/0x360 [ 303.707581][T11913] usb 5-1: Detected FT-X [ 303.714169][T12454] __alloc_pages_nodemask+0x142d/0x5fa0 [ 303.714184][T12454] alloc_pages_current+0x68d/0x9a0 [ 303.714194][T12454] kmalloc_order_trace+0x87/0x320 [ 303.714206][T12454] __kmalloc+0x2e6/0x430 [ 303.714220][T12454] kmalloc_array+0x86/0x110 [ 303.714231][T12454] ld_usb_probe+0x650/0x1650 [ 303.714246][T12454] usb_probe_interface+0xd19/0x1310 [ 303.714260][T12454] really_probe+0x1373/0x1dc0 [ 303.714273][T12454] driver_probe_device+0x1ba/0x510 [ 303.714286][T12454] __device_attach_driver+0x5b8/0x790 [ 303.714299][T12454] bus_for_each_drv+0x28e/0x3b0 [ 303.714311][T12454] __device_attach+0x489/0x750 [ 303.714322][T12454] device_initial_probe+0x4a/0x60 [ 303.714354][T12454] bus_probe_device+0x131/0x390 [ 303.722436][T11913] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 303.730322][T12454] device_add+0x25b5/0x2df0 [ 303.738409][T11913] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 303.746321][T12454] usb_set_configuration+0x309f/0x3710 [ 303.746336][T12454] generic_probe+0xe7/0x280 [ 303.746350][T12454] usb_probe_device+0x146/0x200 [ 303.746363][T12454] really_probe+0x1373/0x1dc0 [ 303.746376][T12454] driver_probe_device+0x1ba/0x510 [ 303.746406][T12454] __device_attach_driver+0x5b8/0x790 [ 303.759750][T12454] bus_for_each_drv+0x28e/0x3b0 [ 303.759766][T12454] __device_attach+0x489/0x750 [ 303.759780][T12454] device_initial_probe+0x4a/0x60 [ 303.759794][T12454] bus_probe_device+0x131/0x390 [ 303.759804][T12454] device_add+0x25b5/0x2df0 [ 303.759837][T12454] usb_new_device+0x23e5/0x2fb0 [ 303.768955][T12454] hub_event+0x581d/0x72f0 [ 303.897177][T12454] process_one_work+0x1572/0x1ef0 [ 303.911810][ C0] dummy_hcd dummy_hcd.4: no ep configured for urb 00000000fc4b8929 [ 303.917163][T12454] worker_thread+0x111b/0x2460 [ 303.922772][T11913] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 303.926567][T12454] kthread+0x4b5/0x4f0 [ 303.926583][T12454] ret_from_fork+0x35/0x40 [ 303.926590][T12454] ===================================================== [ 303.926595][T12454] Disabling lock debugging due to kernel taint [ 303.926604][T12454] Kernel panic - not syncing: panic_on_warn set ... [ 303.926623][T12454] CPU: 1 PID: 12454 Comm: syz-executor.5 Tainted: G B 5.3.0-rc7+ #0 [ 303.926630][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.926709][T12454] Call Trace: [ 303.951889][ C0] dummy_hcd dummy_hcd.4: no ep configured for urb 00000000fc4b8929 [ 303.954675][T12454] dump_stack+0x191/0x1f0 [ 303.961988][T11913] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 303.967753][T12454] panic+0x3c9/0xc1e [ 303.991841][ C0] dummy_hcd dummy_hcd.4: no ep configured for urb 00000000fc4b8929 [ 303.994397][T12454] kmsan_report+0x2a2/0x2b0 [ 303.998149][T11913] ftdi_sio 5-1:0.143: GPIO initialisation failed: -71 [ 304.005675][T12454] __msan_warning+0x73/0xe0 [ 304.005696][T12454] ld_usb_read+0x872/0xc40 [ 304.005725][T12454] ? init_wait_entry+0x190/0x190 [ 304.005741][T12454] ? kmalloc_array+0x110/0x110 [ 304.005759][T12454] __vfs_read+0x1a9/0xc90 [ 304.005784][T12454] ? rw_verify_area+0x3a5/0x5e0 [ 304.005807][T12454] vfs_read+0x359/0x6f0 [ 304.005834][T12454] ksys_read+0x265/0x430 [ 304.005869][T12454] __se_sys_read+0x92/0xb0 [ 304.013005][T11913] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 304.017053][T12454] __x64_sys_read+0x4a/0x70 [ 304.017074][T12454] do_syscall_64+0xbc/0xf0 [ 304.017098][T12454] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 304.017111][T12454] RIP: 0033:0x459a29 [ 304.017144][T12454] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.046440][T11913] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 304.049051][T12454] RSP: 002b:00007fcd6d057c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.058679][T11913] usb 5-1: USB disconnect, device number 5 [ 304.058750][T12454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 304.066851][T11913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 304.067971][T12454] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000004 [ 304.073079][T11913] ftdi_sio 5-1:0.143: device disconnected [ 304.076391][T12454] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 304.188913][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd6d0586d4 [ 304.197060][T12454] R13: 00000000004c6e7d R14: 00000000004dc390 R15: 00000000ffffffff [ 304.206709][T12454] Kernel Offset: disabled [ 304.211042][T12454] Rebooting in 86400 seconds..