VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004, 0x80000000000000}, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:01:11 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x2}}}]}, 0x50}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="723658f208339e7b9c7ec6c88ea201a1ef36c57745e477ed437476d3974af111723031848f2023fad38a835382f6a310182a86cb8fb53afc1e1d35645412f852acb1dc42be4193c52f469f66a1e85e28d1a834d748cc594876f46baa87facec9bfbab96cf53afdb003", 0x69}, {&(0x7f0000000100)="60172641e3f8a78de1cdb301367c025084f638c5532cd1778c8d9ee4c5fa07927238f2d525d2ba2c16cf4c3867e6e6c806643a9e49e10f177b8503eb4866aa22e0607daf919a867ee1a60bb6b3f8bf4309f5cbe9551f62678ac5f8f71ebf44e0c561f922a51380f8af5d9e65666ffb183c82ff0576791e3ba4941f2623eae2fb9767c669c0de5106299adefc9238f03087dc92", 0x93}, {&(0x7f00000001c0)="2359ac77071c4ea43f9d39faf9f0d1298b6eafa41776da3ea5a81846d03d8a042c08af15041dbf71d1c167f770f99e77694cd6a42993ea2711f941aa4818c315b56530e873f24eea53f0dddf7b67efea3f902cbb556ea392fbf9e15e058c123130a5bd1269bb852cd67c9de98b0e18caa4f480f35f3a90935f16289a831d412a6a7473eee52312423ce2e913c57bb37fc369ce327a8e26e7aeea45fef28a9b6763c285dca5ab51801777f35d1c94d468d5e240dd93155f189da1e10d2aa3232724928ceab504f32085d37a4c794cad40da406811907f9f2d511a85b20483365866ac768b061c93f6c2e9419d4a", 0xed}], 0x3, &(0x7f0000000400)=[{0xe8, 0xff, 0x8000000, "4d8ad37033fb89dce88160e10662c333f5eb76c62d255c48b4466f1b86a78b074dd6e36c6434a31a8ffa7c6cd3ba2d97a3cee3a5f8cb72be6423a615b568e271420d57b1b6e8fe810d65a16511315b886bef13370f9ed7c5cf34a08ca12e1c8f48ed9e47dd47c3cb37f2ec6a5b8a9be300f5c2d8a8768934ffad2ffb006ec78efbfe3e494e3415a3ee32c414e6e10cccab9c47c7f6f929adea044148a790f5e266722d8fc282aa61f8aad5c54e4fd2a326c332d03eac8edf251b9fbd2a9f72c227db4f8dd4ca1d3e8d968863acfdb8074f0e9bcbb505"}], 0xe8}, 0x20000800) 09:01:11 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:12 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a0000000000000000000000080012000000705faeff2c2c18055c2d06000000000000000000020000000000ff02000000000000002c4b0000000001fe80000029f2e964651392417ff600a202e09d5f92e4870d89104cd0a9da02eca9b7df82dd7d9f9d9295990eed34fadd3790bb15dee11ed8e02adb28168019172ab68decdb411130921273d06b218bf9efe0578b8d52bf1e01bd686537889976a89525d83e36d85ad50d288c55e46fb1fd2d"], 0x50}}, 0x0) 09:01:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x2f5, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:12 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x6e6bba, 0x0, {0x6, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in6=@dev={0xfe, 0x80, [], 0x10}}}]}, 0x50}}, 0x0) 09:01:12 executing program 1: set_mempolicy(0x1, &(0x7f00000001c0)=0xfffffffffffffffa, 0x7ff) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) 09:01:12 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) fanotify_mark(r6, 0xa1, 0x1000, r5, &(0x7f00000000c0)='./file0\x00') fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000400)={0x1000, "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"}) 09:01:12 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:13 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) r10 = fanotify_init(0x0, 0x0) r11 = epoll_create1(0x0) r12 = fcntl$dupfd(r11, 0x2, 0xffffffffffffffff) fanotify_mark(r10, 0x51, 0x8000038, r12, 0x0) fanotify_mark(r10, 0x12, 0x8000038, r9, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x1, 0x4, [{r2, 0x0, 0x1000000, 0x1000000011000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000000}, {r7, 0x0, 0x10000, 0x1000}, {r9, 0x0, 0x100000000, 0x1000000000000}]}) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x121302, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000811}, 0x4) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = dup(r8) ppoll(&(0x7f0000000180)=[{}, {r1, 0x90c0}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:13 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:13 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r6, 0x2, r8) fanotify_mark(r5, 0x51, 0x8000038, r9, 0x0) fanotify_mark(r5, 0x12, 0x8000038, r4, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f00000000c0)={0x0, 0x40, 0x84d}) r10 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r10, 0x0) fanotify_mark(0xffffffffffffffff, 0x12, 0x44000011, 0xffffffffffffffff, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000004000000003a51a62388c34be79500"/32], 0x20}}, 0x0) 09:01:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x78802900, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x25) wait4(0x0, 0x0, 0x0, 0x0) 09:01:13 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 854.631671][T32396] ptrace attach of "/root/syz-executor.1"[32392] was attempted by "/root/syz-executor.1"[32396] [ 854.663405][T32392] IPVS: ftp: loaded support on port[0] = 21 09:01:13 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:14 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() tkill(0x0, 0xb) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30}, 0x30) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x36, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}]) 09:01:14 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 855.091793][ T9032] tipc: TX() has been purged, node left! [ 855.177144][ T29] audit: type=1804 audit(1593334874.313:11): pid=32445 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir556974674/syzkaller.NYfa4T/990/bus" dev="sda1" ino=15826 res=1 09:01:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x400000}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:14 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/vmstat\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, [], 0x1}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xaa}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4814}, 0x40) 09:01:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:14 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x12fb, 0x0) 09:01:14 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:14 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0xa) mmap(&(0x7f0000129000/0x3000)=nil, 0x3000, 0x0, 0x4002011, r0, 0x0) 09:01:14 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:14 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=[0xffffffff, 0x3], &(0x7f0000000040)=[0xd6ac, 0x20], 0x52, 0x2, 0x7f, &(0x7f0000000080)=[0x2, 0x7], &(0x7f00000000c0)=[0x6, 0x3]}) 09:01:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@dev}}]}, 0x50}}, 0x0) [ 855.776994][ T29] audit: type=1804 audit(1593334874.913:12): pid=32477 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir556974674/syzkaller.NYfa4T/992/bus" dev="sda1" ino=16019 res=1 09:01:15 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 855.898507][ T29] audit: type=1804 audit(1593334874.963:13): pid=32477 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir556974674/syzkaller.NYfa4T/992/bus" dev="sda1" ino=16019 res=1 [ 856.065258][ T29] audit: type=1804 audit(1593334874.973:14): pid=32477 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir556974674/syzkaller.NYfa4T/992/bus" dev="sda1" ino=16019 res=1 09:01:15 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "73083d00000000000000ac5505fc32364f7240"}) read(r0, &(0x7f0000000240)=""/241, 0xf1) 09:01:15 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x8000, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x9}}]}) 09:01:15 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r9, &(0x7f0000000240)={0x11, 0x0, r11}, 0x14) getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x268, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x200040c4) 09:01:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r0, r3, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000040)=0x7) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x10000, 0x1}) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r5, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) r6 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:15 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 856.562419][T32504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:01:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:01:15 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 856.597511][T32504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:01:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:01:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 856.722361][T32504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:01:16 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x18}}, 0x4) [ 856.728667][T32523] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:01:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30}, 0x30) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x36, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 09:01:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:16 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x543000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 09:01:16 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:16 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:16 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x1a8, 0x1, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd6f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb7}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa0}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x101}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2406}, @CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x30}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:01:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x200, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000040)='team0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0xe, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:01:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote, @in6=@dev}}]}, 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0)={0x0, 0x800, 0x8, 0x8, 0x4ff}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000200)={0x18, 0x0, 0x3, {0x3}}, 0x18) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xa600, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r9, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000225bd5e00fddbdf250100000000000000797a3100"/34], 0x28}, 0x1, 0x0, 0x0, 0x20004855}, 0x20040000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r9, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x44094) 09:01:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:16 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:16 executing program 2: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x5000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) 09:01:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:17 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 857.830148][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 857.903489][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 857.967145][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 09:01:17 executing program 2: lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x7f, 0xe9}, {0x0, 0x9}]}, 0x14, 0x3) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x33) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x6c1, 0x2, 0x4, 0x4, 0x40, {0x0, 0x2710}, {0x2, 0xc, 0x0, 0x20, 0x41, 0x3, "b8bfd210"}, 0x2f6, 0x4, @planes=&(0x7f00000000c0)={0x401, 0x7, @mem_offset=0x181b1d18, 0x734}, 0x9, 0x0, r6}) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r8, 0x0) ioctl$FBIOGET_FSCREENINFO(r8, 0x4602, &(0x7f00000001c0)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:01:17 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 858.016618][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 09:01:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:17 executing program 4: exit(0x1308) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x2, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') fanotify_mark(r2, 0x50, 0x1020, r5, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r7], 0x50}}, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8200, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xa600, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r10, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd7000fddbdf2501000000e82d61f0d703228f000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004855}, 0x20040000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r10, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x6c0c0}, 0x4) [ 858.070275][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 858.103136][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 858.132388][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 858.181644][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 858.232612][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 858.260123][T32578] kvm [32573]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 858.298541][T32578] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 09:01:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x8, "220c24ee4a95ac92"}) 09:01:17 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000080)=""/71) r3 = socket$inet6(0xa, 0x2, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000000)={0x3ff, 0x1, "cf12a55b32d6829bc8a8edd7cdce73e371937c66026c63b721c5c91188c47b0e", 0x20, 0x80000001, 0x921, 0x10001, 0x201}) 09:01:17 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:17 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0x0, 0x52, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) name_to_handle_at(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x90) ftruncate(r4, 0x208200) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x4) io_setup(0x202, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d2b78303030303030303030303030346532312c73713d3078303030303030303030303030303830302c66c9c1fb10ec4c0b4907ac14e965d1756e633d4d4d41505f434845434b2c6673757569643d34343739666532302d36a963622d616366532d363732632d36003862663762322c6d", @ANYRESDEC, @ANYBLOB=',hash,fsname=-,\x00']) 09:01:17 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 858.947277][ T29] audit: type=1800 audit(1593334878.084:15): pid=32626 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16289 res=0 09:01:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4d, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x1a0) 09:01:18 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/107, &(0x7f0000000080)=0x6b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100)) 09:01:18 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:18 executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) syz_open_pts(r5, 0x40) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xee) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a00000000000000fbdbdf25088000000000000000ffffac141434fe8000"/62], 0x50}}, 0x0) 09:01:18 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10b9c2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:18 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = socket(0x3, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0\x00', 0x0, r6) write$P9_RGETATTR(r2, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x3c6c8ee585581f0c, {0x80, 0x3, 0x1}, 0x2, r4, r6, 0x5, 0x8, 0x0, 0x9, 0x4, 0x81, 0x100000000, 0x5, 0x2, 0x7, 0x80000000, 0xffffffff, 0x717f, 0x5, 0x1ff}}, 0xa0) 09:01:18 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb7b215f, 0x8000) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000f00000000000000000000000800120000000000baffff06006c06000000000000000a004fabbd8d000000ff0200000000000000000000fffa0001fe800000000000605878e6ff0000000005001a00ac1e0101000000000000000000000000640101015379006aed3700"/120], 0x78}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x410000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000040)={0x2, 0x2}, 0x2) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) 09:01:19 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a00c1220000000000000000080012000000000000000000000000bce66c060000007bb10000ff02ff0f0000000000000000000000012fc504bbcd9a0856fe800000000000"], 0x50}}, 0x0) 09:01:19 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x10b502, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r9, 0x12, "67204eeb52f7d928533a623e6e5cf765b9ad"}, &(0x7f0000000040)=0x1a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:19 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:19 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000926000/0x3000)=nil, 0x3000, 0x0, r0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r0) munmap(&(0x7f0000926000/0x1000)=nil, 0x1000) 09:01:19 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80, 0x498801) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6(0xa, 0x2, 0xfffffffe) dup(r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x20a240) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @local}}, 0x1, 0x8e0, 0x401, 0x49c, 0xaa, 0x40, 0x46}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x10010, r4, 0xf36fe000) socket$inet6_dccp(0xa, 0x6, 0x0) 09:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a0000000000000000603a000000000000060000000000000074f21f070000000000000000ff020000000000000000400000000001fe8000"/73], 0x50}}, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x2c8, 0x2c8, 0xe8, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x7c78, 0xff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth0\x00', {0x76d3}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, 0xffffffff, 0xff000000, 'netpci0\x00', 'ip6erspan0\x00', {}, {0xff}, 0x29, 0x1, 0x4f}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148, 'sctp\x00'}, {[0x4e24, 0x4e22], [0x4e23, 0x4e20], [0x0, 0x1ff, 0xcc, 0x2, 0xfffffff9, 0xfffffffe, 0x18, 0x488a55e6, 0x11, 0x4, 0x80, 0xff, 0x8e98, 0x3ed23ec7, 0xa1, 0x4, 0x57b1, 0x5, 0x7fff, 0x0, 0x4b, 0xbf24, 0x1000, 0x2, 0x0, 0x8, 0x16e, 0x6, 0x7, 0x2, 0x3, 0x7fff, 0x8000, 0x1ff, 0x4, 0xb4ad, 0x0, 0x0, 0x9, 0x1ff, 0x7ff, 0x5, 0xfffffff9, 0x0, 0x20, 0x9, 0x6, 0xffffffc1, 0x3, 0x7fff, 0xbb69204, 0x3b9, 0x5, 0x4, 0xfffffffe, 0x7f, 0x5, 0x6, 0x9, 0x0, 0x3ff, 0x5, 0x7, 0x3ff], 0x1, [{0x0, 0x6, 0x5}, {0x4, 0x5, 0x6}, {0x40, 0x6}, {0x6, 0x58}], 0x1, 0x1, 0x4}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0xc4, 0x20b}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) sendto$inet(r2, &(0x7f0000000080)="2ccb23354ee72d8825dd1a1daca87f8fc2c6d89c41875ba03c1e25f4e077efd64fb7f485fd80dea2a4a50243214f776d5b813e3c2621c1f65ceb4e7e026c46929b2cc299c0ac1b140f5d9fe5689bff5a7ca7fc9e49e096f21e0cad7633c69b605d711f6d69a3979209b4578267e56c26ee331262a3874b1876a6aab79fe2b1db0318ec7b798b148a76f4a25b31ceb54ce63c62f10b75a1bed862d50bb32dc718839a0651d42989425adc27e0f367d695ea612bccde0b540f8475", 0xba, 0x40000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) 09:01:20 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) finit_module(r2, &(0x7f0000000080)='/dev/kvm\x00', 0x1) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$int_out(r5, 0x5462, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:20 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) 09:01:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) fanotify_mark(r4, 0x12, 0x8000038, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev}, &(0x7f0000000040)=0xc) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat(r7, &(0x7f00000000c0)='./file0\x00', 0x200100, 0x12) splice(r2, &(0x7f0000000080)=0x4, r8, &(0x7f0000000100)=0x97f, 0x7, 0xa) 09:01:20 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:20 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:21 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:21 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/141, 0x8d}], 0x4, &(0x7f0000000340)=[{&(0x7f0000001400)=""/205, 0xcd}, {&(0x7f0000001500)=""/146, 0x92}, {&(0x7f00000015c0)=""/228, 0xe4}, {&(0x7f00000016c0)=""/135, 0x87}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/243, 0xf3}], 0x7, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e479fff}, @in6={0xa, 0x4e20, 0x7a6, @mcast2, 0x101}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x7, @local, 0x8}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x3}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr=0x64010102}}, @in6={0xa, 0x4e24, 0x1, @remote, 0x8}], 0xe8) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000003880)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x28, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2013, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null]}) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) recvfrom$llc(r5, &(0x7f0000000000)=""/76, 0x4c, 0x40000002, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:21 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000080)=0x58) 09:01:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:21 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:21 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) getsockname$unix(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:21 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:22 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:22 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:22 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:22 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x8000) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x7, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) dup2(r2, r7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5437, 0x0) 09:01:22 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:22 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:22 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:23 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:23 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:23 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x70bd29, 0x4, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:23 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:23 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) epoll_create1(0x0) r6 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r9, 0x0) fanotify_mark(r7, 0x12, 0x8000038, r6, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x2, 0x7fff, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0xed, 0xbd, 0x3f, "f8935d28"}, 0x1f, 0x2, @fd=r6, 0x9f, 0x0, r11}) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000100)={0x2, 0x10, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@empty}}, @sadb_lifetime={0x4, 0x4, 0x1f, 0x1, 0x0, 0x401}]}, 0x70}}, 0x0) 09:01:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:23 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) r6 = syz_open_pts(r2, 0xc0a40) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = dup(r7) ppoll(&(0x7f0000000180)=[{}, {r6}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5437, 0x0) 09:01:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:24 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:24 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:24 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x37a37c50}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) dup(r1) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r5, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x12, 0x4, 0x2, 0x2, 0x0, 0x4}, 0x10}}, 0x0) 09:01:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:24 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:01:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000080)=""/68) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a00000000000000000000000000000600000000000000000000000000000000000000000000000000000000000001fe800000000000000000080000000000"], 0x50}}, 0x0) 09:01:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:24 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:01:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = gettid() ptrace$cont(0x9, r3, 0x7fff, 0x5c96) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x1008200, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x20}, &(0x7f00000000c0)=""/53, 0x35, &(0x7f0000000240)=""/90, &(0x7f0000000140)=[0x0, r2], 0x2}, 0x58) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=r4) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000180)=[{}, {r5}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r5, 0x5437, 0x0) 09:01:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:25 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:01:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x3, 0x6, 0x20, 0x1, 0x19, "e06c1e8d0fc0f0f2e331c44db7b8ce40edd225"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:25 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:01:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000770200000800000003"]) 09:01:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0xfffffffc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@rand_addr=0x64010100}}]}, 0x50}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000140)=0x2) getpeername$tipc(r4, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r5, 0x51, 0x8000038, r7, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x140d, 0x8, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) 09:01:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 09:01:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:25 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) keyctl$unlink(0x9, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/4129, 0x1021}], 0x1, 0x0) 09:01:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, r3) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f0000000000)) 09:01:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@mcast2}}]}, 0x50}}, 0x0) 09:01:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:26 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x100, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69b2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000001f00000000001b00008552faff2d0008000c05ba626f9a30bf3e02ce28377775d730f8afda67a5509f6e6c6faab3f67da6de11bca9571948ed44fbf06389a921e91364e255813c7d201aacba64d549935685aeba"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff63}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x255}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff25}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x81}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xcf}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048884}, 0x8044) 09:01:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:26 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x990000, 0x40, 0x5, r0, 0x0, &(0x7f0000000140)={0x990a6d, 0x401, [], @p_u16=&(0x7f0000000100)=0x7f}}) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x8000400, 0x8, {0x6, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, @in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x20}}}]}, 0x50}}, 0x40815) 09:01:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x100, 0x1, 0xfffffffffffffff8, 0xffff}]}, 0x30}}, 0x0) 09:01:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) [ 867.823220][ T686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:01:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0) 09:01:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000400)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000f95efcd9f73435cc6832bb36b5b974b08dd100c75feeb9ea254aec8702272405fab30ad36326933d517b379f235ae5984c67bbf00c337df69442a74abeaf3ed7141925ddd43f7bef28b4b189ad74d5e9cdf56b3345274a53e89b5d69d4572a4fc7ebc5d34e5a7f13853f63ac027112bffe88a9b44f1662d511029ff0c4a526c714abaaed81429440a9d94decab7b5150c8d5b5b0a7b64a9e9c43db72f02c3cb9ba586be457136ed9e36f93afda03e27c61cc81e70a8f47b00e646ca6b0c2b34d125d98e44c5518c9849f4c3ab7668bda2ae36e1aad89e4cc04a7050000007b07c4e755884d76bba6e570bebfac40f06a99d97633971a70d47778c0333c0ebf533df47a9a26116bb92bc61da105bcd1d6bf559ee0a3c16fcb172357364f9240ba2d823c10f616f01ad14629d2c3559736e8d54b04cdf11525c0c4e16de72716aa3baad5a6f534090c011adb145a32f1a9d2340fb5efe12bc291972ed9de785af9ff0f431169b2266d9f84b665fc666c412bfed8088a3bfd7d0cb09231c78d5884e40b4a4da8fea7a3ba14ef78e3cf4fadfab8547aca64060855583b19041361f5cf128fe3e63c4d58354c30e8aa5c6efbc785a3999470bc7dd05c238308e7ea8030a39f0df561b65d92cdb8649670e18297b51f2bfa91d63f4af96d08c8ecfc1b0d217b02e9c238c30638a700b938aa2d8151f3409e12cf45150b787a48083077e83418d612efd1c93e60ff742c6c24ffa76932f9d2dc9e7affe82686e965c4"], 0x50}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000080)=0x84) 09:01:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) [ 868.301341][ T752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 868.360038][ T753] bridge1: port 1(veth1_to_batadv) entered blocking state [ 868.410135][ T753] bridge1: port 1(veth1_to_batadv) entered disabled state [ 868.446391][ T728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 868.458563][ T753] device veth1_to_batadv entered promiscuous mode 09:01:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x31, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 09:01:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r5, 0xfff8, 0x10, 0x3, 0x9}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={r6, 0x1c, "5a1798ef71eb0434a3e8ac72e8ce876cf1599649cc5cac279caba45d"}, &(0x7f0000000200)=0x24) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x1, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3918, &(0x7f0000000100)=""/10) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0210190000000008001200000000000000000000002e0006000000000000000000000000000000ff120000000000000000000000000001fec000"/71], 0x50}}, 0x0) 09:01:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}]}, 0x20}}, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x78, 0x10000) 09:01:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:28 executing program 3: mknod$loop(0x0, 0x6000, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40840) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) pipe(&(0x7f0000000040)) openat(0xffffffffffffffff, 0x0, 0x4203c0, 0x148) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x4b8302, 0x0) 09:01:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 868.997710][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:01:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2442}, {r5}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000095321000110000000800000003"]) 09:01:28 executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x4}, &(0x7f0000000100)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f00000001c0)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r8, 0x7ffffffe, 0x10001, 0x3ff}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00060a0000000000000032aeffdbdf250800120100000000030000020000000006000000000000000000000000000000fc000000000000000000b90000000000ac1414aa0000000000340400b2000000"], 0x50}}, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x6, 0x6}) 09:01:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') sendfile(r0, r1, 0x0, 0x800000080004105) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$inet(0x2, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40004) 09:01:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 09:01:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a0000000000000000000000080012000000000000000000000000000000ff020000000000000000000000000001fe8000"/66], 0x50}}, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000280)=0x1, 0x4) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="952692e21c9cb693a70c494d7602fc6f39898a71349209225ffb367ee5cbd40e7b8c17982084125949e31cc251c44cd10b00faae16c17264f9f1bd7123b45da4cc38ce8af3f7fca3d7e7fa8eb468700be21f1d7a1abfad8cc07e623de30dc44b1d3017e03e4498064e967a2eeba21d9c435c41be50cb005db4473568092a25ca33eec86841d08624f4c1ed51f731cc9f255d3a51180371285b4cff4f9fa216d18736313ee61739e1f863066f6ff9460e9c726d58774df233a25230bedb454185e86385fb87d5fb4143e000f35767bad877e379b5f6f9e405b0ad34da4f3a6ed48e873b369775f69c6a93", 0xea}, {&(0x7f0000000180)="613b85b40d53fac589e3d0cf03b493551362fbc7a58012fd74dae29ee9d3ea5274a941447426ab41aa", 0x29}, {&(0x7f00000001c0)="507416adb7432046303fc7d15ad6c092b080d2ed97fe6fbd22d95eaf97b76890c5c65165fa2d521b510d534d9809a0411b83b18ddf1ad80b58273f377f93f36a7683c2", 0x43}], 0x3) 09:01:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@routing={0x5e, 0x6, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, [], 0x6}, @mcast2, @mcast1]}, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) 09:01:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 09:01:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getrandom(&(0x7f00000003c0)=""/2, 0x2, 0x2) 09:01:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) r9 = syz_open_pts(r8, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) r11 = dup(r10) ppoll(&(0x7f0000000180)=[{}, {r9}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TIOCSETD(r9, 0x5437, 0x0) 09:01:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000100)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000df3605000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000a037e5a54732ea70a43b8d5f5b52de1f82668e530720d9508e6151bd0eb3e20e7be63f982239c123aefbb4aed378235e20f2a576da058d555470616043b0ee79bc2c12ca41b32da44b289efaebb35855175a"], 0x50}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x91f0, 0x0}, 0x8) fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) write$9p(r3, &(0x7f0000000240)="f59026f08595e2", 0x7) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fanotify_mark(r10, 0x81, 0x103b, r3, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000c06010400000000000000000e00000a0900020073797a3100000000cbe813c8bfec27b096f578ef146b6c9063d41aac2b1a6be71d39f7d82f227b4324cc5f82227310e8289f9d45c075ca87a119e363e81c6746e96fae93a26013752a6e3286b94651d10ecc36b8c95d350cf6c73f711fd1aa1563efe903fd7c7ad0cdc37ac514f0ba3c3f76f2839529ed286e85c75d7f206849674024b44a"], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x20048800) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4) 09:01:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 09:01:29 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x404, 0x1bc, 0xc8, 0x190, 0x190, 0xf4, 0x344, 0x33c, 0x33c, 0x33c, 0x344, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], '\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0x164, 0x1ac, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x3, 'bm\x00', "13579eb0a38f2ee9b4ae87e76317bca314b6bd6c2bdafec69d77ea686bd5ff9e44262cd15c18bd17165b946a2f4f466c14a1be4bc8927d687450d87789c17d881ac09930d3c62e3e3c64727a2b0dec8316af029e2263c2ce0d7eb13e0d9a3b91e5dbf0771f33d8a34f2bbd1f1d3fcf7ae0a9989d9e3c9f26e798d06a7929d542", 0x40, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_to_batadv\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x460) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x303b5bca) r2 = socket$inet6(0xa, 0x80003, 0x11) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f00000010c0), 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:01:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 09:01:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) setuid(r3) restart_syscall() tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x404980) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000100)={0x8, 0x0, 'client0\x00', 0x1, "d46e9bcb862f1cdd", "86e994f721aa84ddc08a5ddf5bca27c6c1ed484b61aac180eb9c251393ebccbe", 0x1f, 0xa}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) 09:01:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 09:01:29 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0xe6, 0x7f, 0x0, 0x80, 0xffff}, 0x14) 09:01:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 09:01:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 09:01:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 09:01:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x8, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000080)) 09:01:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 09:01:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) read(r0, &(0x7f0000000080)=""/131, 0x83) splice(r0, 0x0, r2, 0x0, 0x19401, 0x0) 09:01:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 09:01:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000009532100011"]) 09:01:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(0xffffffffffffffff, 0x343080) socket$inet6(0xa, 0x3, 0xff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) r6 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = fanotify_init(0x10, 0x400) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000020, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xf}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x20}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xf801}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x100}, 0x4040000) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="08002abd7000fcdbdf25010000000900030073797a32000000001400020076657468315f746f5f626174616476000900010073797a31000000000900010073797a31000000000900010073790c661f20052c5d7a32000000000900010073797a3200eb00000500040ee7540b22155ba43ab373d36668e500020000000900"], 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000009532100011"]) 09:01:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 09:01:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000009532100011"]) 09:01:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x240) 09:01:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x40010) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x1444, 0x14, 0x4, 0x70bd25, 0x25dfdbff, {0x23, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xce, 0x1, "47d3db3769809b1655dda0263b7890978a3e338252138a373a9d938a71304bc7932e34429210f42989e282e61eb335e3c08833e258483400150fefde8fa0471424cb4117432bddee83899f70848623e7c37ddbb047e84867779e05b776f6e16de0c4b5193bed010afe65d06f3a2fc5dffdeaf41e430c54441bc89b31199452ad239ce3eca9892811fe55905935053a39ea20260c3116612c03ffe540794e4af3ad2bc4f2b8806e2d2302501daf090197145f5821c18c330995154957e2d837b47b47f4b9ab178effacb3"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "95f96043b0638b762b6628fc7abe397c02d14192cb32e4938a89653227972120523e43190044871dc6ab45297f959745739331004ef39c3b012c64c770363d1df978307f5b1e791d28a1d9a9cf64e2cd8a0b16b38f3d6e7468ac88bc780f12b41a0bd995221ccf93b64bf5c1973509497723868674a8ff6348e96443aeae97805e192a6dc37e55ac0aa9d507d93ddbaa9b4a3c282a475c65cc6b732c7af736024f5ac10a7e1452fee5b2518e928f7f77b1e981f918d8d4c69227fbfa712a2dd5233a40a67adcfc07a5617f254a3a862d5bad4a718e0aeb9ac48f18dacff6dbe22a2eccd6d4dde304ed524b8e5202bdb423333b0d75a8"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "d9523c83208818a95dbd4e95662c9435f056e140bb07a8150cc7708f864b993e77ebb1071abf6f1c5f50e24a64c2f443369206f7e2354b28904a8eb3979caffcbf749b84"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "6ce34b0f2ddcdc7e2370fbfbbe140651a72f4cb0cc70f8449c1a6ab648ff6f2ae195a36297be925b7a48b93ea5bf6c99cde2d58deb87478bcec57a5f"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "0ea7bf9942d86118bf732731b4d97cea802b0282e56b78ada1741c1fd24fff6ce9f476faede3d05731a3d8d64394a66abce9cf057748e1d32d01c5fdb473d260370eac9f7b0bd85a489732bd992c23fbfab0287f357635eaa78c8cfb033aa621785fe291d8ad67d37a0f7bb01e47ae5d32a255cabbee1b57b5a3b77bcfd64d9aafe7a646f76d78196b6e5893bab38a8dd64941e2ef064a9538b0943abb84f0a79e6c6a2cb1e34ac8a40d0176a720a2f73129df5ea6cb4582c25d030f00b4967eb804a11efbb049f0981f17a713260c6b8887391772577e9cfaa6c32fc2201d"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "5d4d1dcb7572570082d049807bd2acab408cee6e26e7e80e4583a642c882faca88d60cd85a5b42b96ad61f0d7a31599c1bee397365263d261f7a70c8178fbbcc8d29f41529dc8dc43f1097cc5d6abde3b8070484e80aa635124bed96c28020270c454798c5eabad8da2b9b68d3530421801898c3e219c6dd924daacbe6be4d3aa6778d040966b8b3bd292e8d6836beb61ddc73c384e79973c85fd1a097cfd38d5ae0f24bab2726fc1b1da5049febf7080cc09a3237707a62ae7f917e02effb31b152bb3f1cf7e8f3200a3c501ab51acf06fa1e55d2c646b77140281a29b8166830b396704409cd28a2d386ab0065"}]}, 0x1444}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) 09:01:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000953210001100000008"]) 09:01:31 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xba6) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffffffffffedd) lsetxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./file0\x00') 09:01:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000953210001100000008"]) 09:01:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)={r6, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0xe1e}}, [0xffffffffffffffc1, 0x4, 0x1, 0x6, 0x772d, 0x4, 0x20, 0x6, 0xff, 0x3722c5d5, 0x3, 0xff, 0x1000, 0x2, 0x3]}, &(0x7f0000000200)=0x100) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:32 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup(r1) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) r3 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000240)=""/4096) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000000)=""/68) 09:01:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000953210001100000008"]) 09:01:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000009532100011000000080000"]) 09:01:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000180)=ANY=[@ANYBLOB="021000000a00f8ffffff351400000000000008001200000000000000000000000000c57bdd48573524a75b6b0600000000000000000000000000000064010100000000000000000000000000fe8000000000000000000000000000001f64498cca7f4cfc689d1f10badea36952fc03e6acec2972cd101618ab05f03752c0eafad85516554e485324fc7a6048b6be14f21c3c7f999b6ff09c59b776cc6096a729e88be04a5c56c7ea74eb1cc7cf93e2b27ac2496a55ba947144671267f0a64990afdf4d033171108bdb09b1f81a19f621e33cff93b51e89e0f1a6c92034f1d876b82af0f3bc321ded619e3ce5c1e8998a15cd5e038885a1f4069224c37acc6fb25669580b6d13c07b7710cc239e185560491bd156efa183ff2392811e556b69317c836ba1dbdc185febf533a896462b67ccbe64c0e65738fca1ce2232ed9419850bf91f9720218e2125"], 0x50}}, 0x4804) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x44}, 0x1ff}}, 0x0, 0x0, 0x31, 0x0, "da3c73b5ad55f2b36310998a5d0bb0fceb985b5638b3954fe5b6176d27b356fd90c599e2646a9b7be48de4da75d503d9c13d0a202be30438fd8442e063c35dc0eadf9860f7ec522c8e226ae65867d721"}, 0xd8) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x400, @mcast1, 0x722f764e}, @in6={0xa, 0x4e23, 0x0, @local, 0x80}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x3ff, @private1={0xfc, 0x1, [], 0x1}, 0x9c6}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x101}, @in={0x2, 0x4e23, @multicast1}], 0xc0) 09:01:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000009532100011000000080000"]) 09:01:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000001c0)=""/62) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x7f, 0x20, 0x7f, 0x0, 0x0, 0x1, 0x60114, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff4, 0x101}, 0x1000, 0x3, 0x4, 0x6, 0x13, 0x9, 0x81}, 0xffffffffffffffff, 0xb, r5, 0x8) accept4$llc(r5, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) write$binfmt_script(r9, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/$):+-+.-(\r-}'}], 0xa, "29cc4d41dc235b10c16e5aa89b0f50639773c07481607a869a72e99056a6cd28aeeec856baa306997758886be37c545de538a1bf2642367593dfcd9ff884d5152672c5330c58c70bc2d744e57e5dce79e610fe5517366ce1c840edddbda327814d615f156f3cb1ea5d8a5a31bf800d99699a5a4f298ba2b6e85bd11838f0f71d444009023b571d"}, 0xa0) 09:01:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000009532100011000000080000"]) 09:01:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) open_by_handle_at(r1, &(0x7f0000000180)={0xa6, 0x80000001, "e38f7fcc90f801e4ddc937437ca42652a976104eb9ea369883598fb0832de57d80359d7e58ba6d15211b34f975520672afa82196ff31bf72fb8713b369c0971118a87a7b251ec6b763d2362da5bd7a8c105b61c6b619c6adc5a637e520a5e8f97a48ab53af33b9b41aaaccb9401b15b4fd3fd583b53f791ef2e315bc3c31ab547eda1f074bf1e9a6053192b3cd66bf4d744f0bb57d30749e5eb93ec95610"}, 0x600040) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a0000000000000000000000080012000000009b5a3682c07d000e0006000000000000000000000000000000ff0200000000151531a000000000000000000001fe800000000000000000000044a8c93e95eb0a4f05f3e5c32d5f02f1ceda03273930d1be188db18e20fda0bee708e6c0cf8e3a970a06ccf9b6eff48b533a5a14c62d72ab553230261078424c8043a5bf1b245068bf99b058bcaa3aac8ddcf6090a1d1fb1"], 0x50}}, 0x0) 09:01:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000953210001100000008000000"]) 09:01:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:33 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:01:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a000000ffffffff00000000080012000000000000000000000000000600000000000000000800000000000000000000000000000000000000000000fe8000000000000000000000000000004caf8a93caa9dd12a1bfabefe7fcbe1ecdc46c81"], 0x50}}, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x404, 0xffffffffffffffff) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r5, 0x51, 0x8000038, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f0000000000)={0xff, 0x7, 0x200}) r8 = fanotify_init(0x0, 0x0) r9 = epoll_create1(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) fanotify_mark(r8, 0x51, 0x8000038, r10, 0x0) fanotify_mark(r8, 0x12, 0x8000038, r4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r0, r4}) 09:01:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000953210001100000008000000"]) 09:01:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x3) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xf}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xffff}, {0x5}, {0x6, 0x11, 0x1}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4880}, 0x4000081) 09:01:34 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:01:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000953210001100000008000000"]) 09:01:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x200}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x18}}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xa600, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r7 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x4000010, r7, 0x21000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004855}, 0x20040000) syz_mount_image$xfs(&(0x7f0000000400)='xfs\x00', &(0x7f0000000440)='./file0\x00', 0x20, 0x6, &(0x7f0000000780)=[{&(0x7f0000000480)="428e1933ea21c85ffb29f0ec9f08f649d056250f8680cd076f29b10f76f48b4b7cc50928dd562cf9498c6c17a73fbc22b4edb7b59e81daef9e70e4f00eb86d0973be4533772c0503c33f", 0x4a, 0x4}, {&(0x7f0000000500)="4a420afcc9036a0c4cde9b6146835d0936448c0b75e044b03ece5ca0d5b38b6b4ff06c608544effc14f3ebb42c4f19e37189190e44100831ade6efb5b7bc869e00cb1a9ce6cbf442bc50743bad62bde57547e91a704770c51e38fe9ff8b42590aaa8fa48a01cdf364c8ac25cd082f41c266d30ecc053c41e53e095fc635a52363a3cf7fc469f95cae4d25945556df63e8ab0de3cab53844bfc676617bd0c3879c2f2866acfb38bcd365bc8b833259c2ef38d5d3951d1f7", 0xb7, 0x7fffffff}, {&(0x7f00000005c0)="bea49ce5346005d264a37fe22cfb7021ba467a4d14d9035e4fbde64e1753be724270101d4ea8dc9bd4853e37c10e249749fb78b6078b18f0b66f0fd61b8b50735ac36ce0a7ecf63aa035d6469440b71bd1aaf26788aa6366dcf060c36c7751ab9544f59af22a094ad39d68c38f0a71b0fc1ede8aefc48f2d70d63200fe5472f0f8f939f899f5ee4f23d547965240389532bd48c027ac6221dd46f5664f933633128524a1a8d49ae746a4c3cc70c96db490dd7c11b2f0c7ffbf21dce0ce513d7d8ac15877d2214d8874e0b42c382f6672c055835953864ec6457cc477bd38001ad435", 0xe2, 0x8}, {&(0x7f00000006c0)="925b334f2f4fbc9e316dede1a92d0d074f47d290a0d7590d3b2c819274", 0x1d, 0x3aee}, {&(0x7f0000000700)="f1acb76ca30ac59d0442bf80a3a9d68b3512e48ef6bb", 0x16, 0x5}, {&(0x7f0000000740)="05fcf8e5118aced88fcadf453c2120dcae70ec17378dd1bdbcee4037b4c6ca66cede8d8eae8ea8", 0x27, 0x10000}], 0xa00000, &(0x7f0000000a80)={[{@inode32='inode32'}, {@logdev={'logdev', 0x3d, './file0'}}, {@logbsize={'logbsize', 0x3d, [0x6d, 0x6d]}}, {@norecovery='norecovery'}, {@pqnoenforce='pqnoenforce'}, {@swalloc='swalloc'}], [{@fowner_eq={'fowner'}}, {@euid_eq={'euid'}}, {@obj_user={'obj_user', 0x3d, '/dev/bsg\x00'}}, {@dont_appraise='dont_appraise'}, {@subj_user={'subj_user', 0x3d, '\''}}, {@fowner_lt={'fowner<'}}, {@uid_eq={'uid'}}, {@fsmagic={'fsmagic', 0x3d, 0x60d1}}]}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8850}, 0x20004045) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000000)=0x1ff) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:34 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:01:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) 09:01:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 09:01:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'bridge0\x00', 0x1}, 0x18) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r6, r7) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, 0x100}) 09:01:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x2) 09:01:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:34 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 09:01:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) socket$inet6(0xa, 0x3, 0xff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r5}) r10 = dup(r9) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000010000000000000000000000085000000360000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 09:01:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private=0xa010102, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000080)={0x9, 0x1, {0x1, 0x1, 0x0, 0x3, 0x7ff}, 0xff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:35 executing program 1: syz_emit_ethernet(0x46, 0x0, 0x0) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc300, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0x98, 0x108, 0x0, 0x1d8, 0x198, 0x198, 0x1d8, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1000000}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "d652"}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$revoke(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 09:01:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FIOCLEX(r0, 0x5451) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 876.549128][ T1279] x_tables: ip_tables: icmp match: only valid for protocol 1 09:01:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x7a0640, 0x0) fcntl$setflags(r4, 0x2, 0x1) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e22, @remote}}) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:36 executing program 1: 09:01:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x2b, &(0x7f0000000040)={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20000060) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 09:01:36 executing program 1: 09:01:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:36 executing program 1: 09:01:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x59a, 0xffffffff, 0xfffffffffffffffc, 0x2}, @sadb_ident={0x1, 0xb, 0x1000, 0x0, 0x3f}]}, 0x40}}, 0x0) 09:01:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:36 executing program 1: 09:01:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x680080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYRES64=r8, @ANYRES32=r2, @ANYRESOCT=r5, @ANYRESDEC=r6], 0x50}}, 0x0) 09:01:37 executing program 1: 09:01:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:37 executing program 1: 09:01:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001100000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000002400)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "b53cc0c87942de50133609a72cb44f927239a3925e8a5fe70555f0f8f0e329d3715e8f732683affc9b48"}}, 0x0, 0x0, 0x0}, 0x0) 09:01:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:37 executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0x1, 0x3, 0x9, 0x0, 0x7}, 0x1, 0x3}) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_KEEPCAPS(0x8, 0x4) 09:01:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 878.779880][ T17] usb 2-1: new high-speed USB device number 10 using dummy_hcd 09:01:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000000c0)) 09:01:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 879.031132][ T17] usb 2-1: Using ep0 maxpacket: 8 09:01:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x401, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) [ 879.241518][ T17] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 879.269795][ T17] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 879.306568][ T17] usb 2-1: Product: syz 09:01:40 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x18, 0x28, 0xc0, 0x40, 0x413c, 0x81a6, 0x3df3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0xea, 0x94}}]}}]}}, 0x0) 09:01:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) r6 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup3(r2, r1, 0x0) r8 = inotify_init1(0x0) r9 = inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x5b) readv(r8, &(0x7f0000000100)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1) inotify_rm_watch(r8, r9) inotify_rm_watch(r7, r9) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000100)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000000000000ff020000000000000000000000000001fe8000000004005c00000000000000000000000000000000000000008a9b1da87efa3cb7487f4362abacb88e2456127cc2bd542678128e33ad7ee0e309778cc9544cfb4a8a478f38ea119b4700817775e39e0240867a671852735d07dd774484c6bf3b11dbed3165237847a62c331ff9db3f4e82af799cdea0a1c5d849ab816013855064b03effebadc2dabd68643cce12"], 0x50}}, 0x0) [ 881.514657][ T12] usb 2-1: USB disconnect, device number 10 09:01:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) connect$netlink(r3, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) 09:01:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x6d0, [0x0, 0x20000400, 0x20000430, 0x200008d4], 0x0, &(0x7f0000000200), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x73c) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:01:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 881.979829][ T12] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 882.341148][ T12] usb 2-1: New USB device found, idVendor=413c, idProduct=81a6, bcdDevice=3d.f3 [ 882.359118][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.377561][ T12] usb 2-1: config 0 descriptor?? [ 882.634131][ T2485] usb 2-1: USB disconnect, device number 11 [ 883.409559][ T2485] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 883.781982][ T2485] usb 2-1: New USB device found, idVendor=413c, idProduct=81a6, bcdDevice=3d.f3 [ 883.801620][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.836366][ T2485] usb 2-1: config 0 descriptor?? 09:01:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:01:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a0000000000000000000000080012000000000000000000000000000600ff020000000000000000000000000001fe800000000000970d024e43cf0b8600"/80], 0x50}}, 0x0) 09:01:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x3) [ 884.099629][ T2485] usb 2-1: USB disconnect, device number 12 09:01:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a000000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe8000"/80], 0x50}}, 0x0) 09:01:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:43 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2a0900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8f623437b8ddb7ee6ec302d9a67d71d3eb2b6ede09fdffffffffffffff8c1f046308dd64eb234eaa11faf553588565d464702f0d142f12d41d998c0068843c4760db301ab8e4574e1ca6b258b0a737f599ea094eb7621ed6cb5aec4f81cb9b2e889da7529b392376c7b51d6d958a3906acd383eadf9cf871e00e9c72df622c132c1964e96cea70355cd3e47c369e6c2d69cc4935f1ae803ec41b84286170e2bab429c579ae5510760e1a1e137aea93fd7db91df26cd78aa0de"], 0x50}}, 0x800) 09:01:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 884.569457][ T2485] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 884.939577][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.956680][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 884.974455][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.995462][ T2485] usb 2-1: config 0 descriptor?? [ 885.480550][ T2485] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 885.505973][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input12 [ 885.606449][ T2485] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 885.883139][ T17] usb 2-1: USB disconnect, device number 13 [ 886.669355][T18965] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 887.059369][T18965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.070514][T18965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 887.079725][T18965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.092540][T18965] usb 2-1: config 0 descriptor?? 09:01:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:01:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x400300, 0x6e6bbb, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x20000, 0x0) read(r1, &(0x7f0000000140)=""/8, 0x8) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 09:01:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20000, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x311, 0xb4, 0x0, 0x5, 0x0, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:46 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r6}) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) r10 = fanotify_init(0x0, 0x0) r11 = epoll_create1(0x0) r12 = fcntl$dupfd(r11, 0x2, 0xffffffffffffffff) fanotify_mark(r10, 0x51, 0x8000038, r12, 0x0) fanotify_mark(r10, 0x12, 0x8000038, r9, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r7, 0x80000, r9}) [ 887.380733][T18965] usbhid 2-1:0.0: can't add hid device: -71 [ 887.386785][T18965] usbhid: probe of 2-1:0.0 failed with error -71 09:01:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 887.439313][T18965] usb 2-1: USB disconnect, device number 14 09:01:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f00000001c0)={0xfc8, "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"}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x42800) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:01:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1={0xfc, 0x1, [], 0x2}, @in=@private=0xa010100}}]}, 0x50}}, 0x0) 09:01:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 887.859303][T18965] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 888.239474][T18965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.250662][T18965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 888.261621][T18965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.271649][T18965] usb 2-1: config 0 descriptor?? [ 888.750353][T18965] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 888.761416][T18965] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input13 [ 888.860747][T18965] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 889.176197][ T2482] usb 2-1: USB disconnect, device number 15 [ 889.182318][ C1] keytouch 0003:0926:3333.0007: usb_submit_urb(ctrl) failed: -19 09:01:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe80e5ff00"/80], 0x50}}, 0x0) 09:01:48 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:01:48 executing program 2: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 09:01:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x901) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000140)={0xe, 0xffffbf3e}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000002b80)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r6, 0x1}}, 0x18) 09:01:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:48 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:01:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:01:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000010001fe8000"/80], 0x50}}, 0x0) 09:01:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:01:49 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x75, 0x400, 0x4}}) 09:01:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0x8d, "3028feba5315ace15be43ae27d98d1b7a7fbb718e4ff6f73e733e0747650cdb7c7102eb35759553660ff9e1a3174f87771378956b2f0159fba220e58900e9af453b9ff2daebea2c3365b59ccd67a8241af60b52ee5441c10ec28fa8a18a2a4741f52f985d6bccf9e6a6c23cb4484ff84255dd7e27cbe748c1902dc4bf0aeeda9d890e6b955be4e77b758f73446"}, &(0x7f0000000140)=0xb1) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) fanotify_mark(r4, 0x12, 0x8000038, r3, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(r3, &(0x7f0000000180)={0x23, 0x37, 0x2, {0x0, 0x2, 0x2, r7, 0x5, '\x10\'-$('}}, 0x23) 09:01:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 890.129305][ T2485] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 890.499199][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.514126][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 890.524112][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.538740][ T2485] usb 2-1: config 0 descriptor?? [ 891.020244][ T2485] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 891.039019][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input14 [ 891.126074][ T2485] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 891.444362][T19641] usb 2-1: USB disconnect, device number 16 09:01:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:01:51 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:01:51 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)="84622f0911740eb3932f2a456bfc884662fa9672a09a057fac2d975c24b9b71e0dc9bb86e0525cbf60048d63ba2e9a5040ebefdf969ce151c61bbfb9d2cea1bc0d697d588a227fdc7cc6273797f55c0232e5781f5640ae38a38f9e026b7a4b0abec530de632cfd8df086da50666b51e5abb1fae3131a696a7d08f10936c8f838663dcd7ff0a39c255c956403bfc0938bd87fec40e307a867401f722c362b52f6256ec02e02e37373b2cc78573ca0f219c9eb39ec49ab470fe423dfd25e776963585e088f303f90445ee3a70bd48a638230445f5b5093963277adeb69c4a88b279a06", 0xe2, r0}, 0x68) 09:01:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a0000e4858464d082be31f087417c000000000000000000080012000000000000000000000000000600115554f2a80d61d6000000000000050000000001fe8000000000000000000000000000000000000000000000d7ff89bf4121399e6f92"], 0x50}}, 0x0) 09:01:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8}) r3 = syz_open_pts(r0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5437, 0x0) 09:01:51 executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = syz_usb_connect(0xa, 0xb1d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x58, 0xdf, 0xf8, 0x20, 0x2262, 0x2, 0x1cc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0b, 0x3, 0x81, 0x0, 0x70, 0x3c, [{{0x9, 0x4, 0x42, 0x73, 0xb, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x20, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x0, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x401}, @generic={0x102, 0xd, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x9, 0x2, 0x1, [@generic={0xc8, 0x9, "60a84c4e5b35cf0c0abf291aa4889cef81bd61553c18389e8d643718ff628eebec8848a985152c355814672f2ba8825654afe5dcb27ba17965991a1f2f160f9a21f8a8d10095a3d1ea6ea1e152ebbd4090ac462528b25c80f87bfef80a536d23ce02704ff665a485a32176467efb598cbc738e88f62f94e0872d1c5c3b15ed39b56549befa9d0b077f7672ed329165b91398fa2245c00b04ca6041ce43e927eb6f4c29a07a4fb6eaa28e2c9af553c5acaf07e3527e9291badd833b4368b780ca8747a4834be0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1f, 0x81, 0x30, [@generic={0x27, 0x31, "228eb397a69d293a0001830f09a0abb0a552ead58233201be2931e9df344b382d32a0f5795"}, @generic={0x95, 0x22, "bfff8fa7f856740680b0c386139318ef5673dc9f1634502b4312a794cf7de2f021be381eef93cbf33ba873e0fc41e9935ea31cd52b4a1cb6eeca182d34cd567903a8239784621de8a4b9f71e256537487d850517d93caf026f328c61aa0ec5d46c4bc51344abda4762841345c964081c57b836d24e1d589d5ef9f06607af5ca5631763562b1f1bca85691160a8706b94f5ab4e"}]}}, {{0x9, 0x5, 0x3, 0x16, 0x8, 0x7f, 0x7, 0x5, [@generic={0xad, 0x3, "8611b7990a1d3ff560d8b18d2076a5fd5028ab8204ffc11d80f54e415fd69c169ba1173bf553a2f9ed70cb29cb648614098e2602edd8a8debe54d347265d2512b7a19a698323002d60223373bcc0dd9be0ed335a47d9393cfb6640f739087cce18feca9be13317601c4b49eeb96ea2bd2430bcf9223cec6e5abe19c896a2361c806e50d2b7ee14228bf2680449ffe7393f8c8093a731bf86051f7e3ee0d12fbdb2ca6e617de89302c6c5f7"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x2, 0x7f, [@generic={0x9e, 0x2, "5f8e9438f21efe87b5032097bccc61efae1b6de0a0ec698cffffbc5017dbc88ba17d200074187f0882fb7b9dbc82fa6d3b9d091a40a7d1dbb96e9ff6dfe14cd43df0400f78fd84a4cb9c82f808f9d3d4d2e082aac8b1697ac5ee27ac8dcc1fefbcae8d86b929cdb23149194ea8f4531ea85ef641f28dca6a6ba458726505f8569206953873de8810c32b52725a5b00b0960e953414f64d5333446201"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x9, 0x81, 0x3, [@generic={0x65, 0x21, "3ae3793554ba74b203548b1924792167de42d54ce040604c80234e2916fa0ba02f0166e5c2d5a221e13d1dfec853f108095488173678f444ec3db6e2db348c956897f5fcf6a8c25dc7595bfa8f892504cc878dc3618e6b21a6aa4c8783b4a4701be7cd"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x40, 0x3, 0x6, [@generic={0xb2, 0x7, "5cff89128cbdbc4e7c4045c5a4f8ef6c1d609b0722c7a213d27e3ce53388f3155ca615c9f2380004c977376b377e84907c2dced4424928ba8d39c193e21770f5710c231c27cdd4757b484b8b9aff1c4a2a78932e0220b24b0ce820273c0be55dc0795153f561e2f60acd8d802a7ce89a6ac5a158cdfdaf3bc4edb4d7afce79b4f330bd4052a64d2b17241897098becf554de362755b97947ac95239f20702dce74bb94595c8b247c3b03d9377e35fdc1"}, @generic={0x57, 0x7, "9ddfc178f6463c6735ed662829243d9a4e542c0acd127c64f89514b56d7d8582f12a4ecb6ec602ee0effc8d76ad38ca333e350ec168af29e864ae7d726199fbef7c64043d1992b53f44d1cbd15feda813828fa7e36"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x7, 0x5}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x7, 0x7, 0x7, [@generic={0x38, 0x5, "c74cc692bb1dadb6c250863cccaa7719cece442fb1fa29ab1ee0bb01a9e6d397c73b3e3f7aa1eeaf15f9893c0db13612671df7ea721b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x65729a0761df1bb5, 0x1f, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xa4, 0x3, 0x6, 0x2, 0x2, 0xff, 0x9, [@generic={0xfb, 0xb, "e4923f847788876da56907d62076defc10087be81c136a379d962fb700681a8c8837a54021cdf117fcea9fcf92f7a7ead06d23184f07623b8e22170080cd984363e5b7d1d95f95c0688804d6ee6d91c6011ac95b08122097e08ad3a0f1336617a0bff07a2de858c90df2e052e78353d61c732d97bb6b572f11506326ac6e29df90a9fa98272c12496f7bbdef7e436a27c86d1bdcbbfe3b21da52440a76580b90337cf5c50b1eb417515f524f786b2af708152b34bc17957a69d666f7530efb2a5bc6ee8a9cfc303ddd0531777ba6b8274c64c1bb9141b23f36f239349ad633dd5076772a3ee63113a27ac2306d3a889b6ff9511e498c284411"}, @hid_hid={0x9, 0x21, 0x1, 0x3f, 0x1, {0x22, 0x786}}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x5, 0xef, 0x2, [@generic={0x85, 0x73, "48d9a33c0e708d94451d7b1ed0e87fa225fc099b1d9a63edcf9bffd3c37ddd82f2010b70887a110f976f470dfe09b3f8de8b81bb43aa8d03f792e1eddec35f5ed86a747d24e7e2f499aa7a57f8e8ba36b34fa10c307cc0848bc6b25d3046a1d78e3c3b31670b3eb5080ef3883e986743e4f790338bb1b2355a77654d9caab74c7d4abb"}, @generic={0x1d, 0x2, "3a9108ff207bc283bd57b31a02b37b7c1ae3f28b75c757730c4001"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0xff, 0x0, 0x20, [@generic={0xad, 0x0, "635af78840449dacd7310078692e4f11b17982dbac9685294e6a4b0774726ef27e791044f97051aa29ea1d61c4b6a80a695066355776ade2584fedf4c34d8330f9958770b09d076c1d21016840a4e21a6938430ca8a3dde9d5a7ee2e5c1fda755708a53cca54fdf8d1fe1c7904622d2301a7e4a42dc0b461f81709f3e9ebafd0e9a9ddd87e92f255805445ea470031fbfce6087a0fe93b044b9304f1e74e99e420861be5341d90441f033d"}, @generic={0xd2, 0xbd35d766f7a24395, "d312113858764b0f31f37b2cdf1db341733f7dfd9ecfd021d789c5742b7277f9948af52fab8ea5a11467524c422ec6c4eb95a1e109b9327f3c795cddacf8e9502b8a330ab87246d7bdaa47741e93366effdd2c84af4b071b05ee4de181142adec4ceef3797aca8018dc667f4ca4c42ef56880d24112be175b7b0c92f04b0a5bdaf027e2e0b27de063b93d9eef58f3c7cf2e1f888e3e86bf4bfe646e1970f593da61a1333c91a8bda8a86d17dbf946105a55ff0e342323b53df53eb188beb68a417a372cfda58329daf04304ec4fe2a9b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x80, 0x4, 0x3f}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x9, 0x1f, 0x6, [@generic={0xfe, 0x21, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc8, 0xff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x2, 0x3f, 0x85, [@generic={0xa, 0x8, "6dde9c3c9982d66b"}, @generic={0x6c, 0x22, "a7785688c879452bef66fc7a9d59fb44cdab8d22986d0bb3f1742a1d3c1fe9db6813974dbcc7832d67dfb9fd0baf2870b6a05fc4e0a7ba3c9882acc7236d22eb32644c2d57a1d92d20b41ef65e89a2d952bbe77e6dd160646bee7707a1ee0555372584ca0aafc8147c67"}]}}]}}, {{0x9, 0x4, 0x3f, 0x20, 0x1, 0xff, 0xff, 0xff, 0x9c, [], [{{0x9, 0x5, 0x4, 0x8, 0x400, 0x2, 0x7f, 0x7f, [@generic={0x20, 0x31, "4a1bb219542da2e3c718e17d3f713adddd898e9bfbb568d6635b4c45b82b"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x43, 0x8, 0xbb, 0xff, 0xdd}, 0x26, &(0x7f0000000b80)={0x5, 0xf, 0x26, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "411210ee5cc0ae9823f6a263647c3d8d"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x0, 0x8950}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x30, &(0x7f0000000bc0)=@string={0x30, 0x3, "7c07a83911f15955a8ae0f298bdf131c2e59d92bc5e62dfbaec22b8bd4ce90ba4e79ee064afaeec4d2508eeffb1a"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, &(0x7f0000000c40)={0x0, 0x21, 0xa2, {0xa2, 0xb, "62fd0c8c74c3c100a9719e6464688926d3fda54f00698ba2e2220a96295a61b4d80830f614eaf2eebc08865b266b3618b08afc3b9680108d4f66a75d9313165b2f54802b036642665dcc5b307cb32c13360bd81f6df0eea4bd818b1b7038a2e7a3f154bbefbc7db0b89d4b273a64990b5fb575e84dd27b194e59973c2b4c9329d872332b1ced828b8f40e97a2a650399bcac13db1fd839c615232be73b4fd71f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000d40)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x2, "6f1baa90"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x1, 0x2, 0x5, '\n'}, @local=@item_4={0x3, 0x2, 0x3, "b0f66862"}, @main=@item_012={0x2, 0x0, 0xa, "d0e9"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "7cbe0b58"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x21d}}}}, &(0x7f0000001040)={0x2c, &(0x7f0000000e00)={0x20, 0x16, 0x8c, "09e94c46aa60ade153b58581ea61a685f7182f3d6cfc94b997e065df1d95a86aa66152b5d7d9135516dd7bcbb61992376d09c90f937ad0e299b0ae484058502c98e5eb876fc3a83184b3fab76ba302651552242591568d2c71dd458b8c8859bfd04aa371be29eb6543e1234a480e9188af9d216168e4126aa8b717ee94de522d081154c2e75c560b57659f15"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4b}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000000f40)={0x20, 0x1, 0x9b, "650b954bb84b844d424280d5e6cf6e03095c01d32823805485c63dff4ed426e753b20a9ed1a13eaa477f8977370ef5c22a43d4de303719a8b22b0c81388ed0cf49957201de062b4165f5222c4d63922a4daa246c1b8225ee2e21f7a7e0a67cc9167fc415f1db19c45947f508fb802c58048ddb39da35a67ae006e37abaaf1e0f26f65b89711a290b6ca1fadd716c9258696b4fd3f0193b429c7cea"}, &(0x7f0000001000)={0x20, 0x3, 0x1, 0x5}}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$l2tp(r2, &(0x7f0000001080), &(0x7f00000010c0)=0x10) 09:01:51 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:01:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:51 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:01:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:51 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) r10 = socket$inet6(0xa, 0x2, 0x0) dup(r10) ioctl$sock_SIOCDELRT(r10, 0x890c, &(0x7f00000001c0)={0x0, @can={0x1d, 0x0}, @ipx={0x4, 0x6, 0x0, "2a698d1a2ee1", 0x87}, @l2={0x1f, 0x5, @fixed={[], 0x11}, 0x4, 0x1}, 0x7, 0x0, 0x0, 0x0, 0xfbff, &(0x7f0000000180)='veth1_macvtap\x00', 0xfffffffffffffffe, 0x1, 0x4}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x13c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) [ 892.379028][T19641] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 892.456337][ T1923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 892.621495][ T1926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 892.749305][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.772373][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 892.783790][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.816882][T19641] usb 2-1: config 0 descriptor?? [ 893.300055][T19641] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 893.311370][T19641] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input15 [ 893.395182][T19641] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 893.721537][ T17] usb 2-1: USB disconnect, device number 17 [ 893.738835][ C0] keytouch 0003:0926:3333.0009: usb_submit_urb(ctrl) failed: -19 09:01:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:01:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:01:53 executing program 2: fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x12, 0x8000038, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200200, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000100000000000000000000095003f0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r7, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r8, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r8, 0x4) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x7, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x11}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x0, 0x9, 0x0, 0x8, 0xffffffffffffffc0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x69, &(0x7f0000000080)=""/105, 0x41100, 0x8362a8b845eadd09, [], r4, 0x19, r5, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x1, 0x1}, 0x10, r8, r10}, 0x78) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) 09:01:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@rdma_dest={0x18}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x60}, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000000a00000000000016f5fad7b59ff0240ed1ca0c763100000000000097000000000000f7df0100b7ff0200100000000000000000000000017e020000000000000000"], 0x50}}, 0x0) 09:01:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000240)={{0x3, 0x1, 0x80, 0x6, 'syz0\x00', 0x2}, 0x0, [0xfffffffffffffff8, 0x2, 0x1, 0x9c2, 0x7fff, 0x8, 0x7, 0x852, 0x80000001, 0x29e12188, 0x3, 0x0, 0x5, 0x9, 0x5, 0x1, 0xffffffffffffffe1, 0x1, 0x7, 0x0, 0x7, 0x3ff, 0xffffffff, 0x101, 0x121, 0x1, 0x401, 0x5, 0x8, 0x401, 0x9, 0x1, 0x3, 0x8, 0x200, 0x0, 0xffff, 0x8, 0x8, 0x7ff, 0x0, 0x1ff, 0x5, 0x20, 0x5, 0x100000000, 0x6, 0xf, 0x6, 0x9, 0x1, 0x800, 0x7fffffff, 0x8, 0x8, 0x10000, 0x200, 0xff, 0x2, 0x5, 0x4, 0x401, 0x5, 0x80000001, 0x7fff, 0x7fff, 0x667, 0x0, 0xa, 0x6, 0x0, 0x0, 0x5, 0x961, 0x6, 0x3, 0x7fff, 0x3, 0x7, 0x4, 0xb6, 0x5, 0x8, 0xfffffffffffffff7, 0x6, 0x5, 0x2, 0x6, 0x8, 0x0, 0x9, 0x9, 0x100, 0x2, 0x5dea, 0x401, 0x32, 0xfff, 0x8, 0x901, 0x1f, 0xce7, 0xd0b, 0x8705aad, 0x2, 0xffffffffffff1c3d, 0x5, 0x5, 0x7, 0x10000, 0x6, 0x2, 0x1, 0x3, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x8, 0x0, 0x200, 0x5, 0xff, 0xffffffffffffff80, 0x4, 0x8]}) r5 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r5, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r0, 0x8000) r7 = socket$inet6(0xa, 0x6, 0x1) r8 = dup(r7) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0x1000000fe, 0xff, 0xff000000], [0xff, 0xff, 0xffffffff], 'gre0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x9}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x7}, {0xffffffffffffffff, 0x0, 0x4}, {0x0, 0x6}, 0x3, 0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f0000000000)='/dev/ptmx\x00') ppoll(&(0x7f0000000180)=[{}, {r6}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5437, 0x0) [ 894.307509][ T1986] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:01:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:01:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x5) [ 894.439609][ T2003] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:01:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:01:53 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) truncate(&(0x7f0000000040)='./file0\x00', 0x100000001) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x40, 0x0, 0x7, 0x500}) [ 894.649014][ T17] usb 2-1: new high-speed USB device number 18 using dummy_hcd 09:01:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 895.029311][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.040941][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 895.050517][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.063844][ T17] usb 2-1: config 0 descriptor?? [ 895.549996][ T17] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 895.560915][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input16 [ 895.650416][ T17] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 895.756995][ T2485] usb 2-1: USB disconnect, device number 18 09:01:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:01:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:01:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000100)=ANY=[@ANYBLOB="021000000a00000000000000000000004800120000000000000000000000000006000000000000000000000000000000fff3ffffff000000000000b24b000001fe0300000000000000000000000000006627bf4a60a605294ca0cb95506b15ef84663c059b83531e288f94763d71b3dd3b3890406ea3dbed5e27ef301f5b958359233b678cd3bda18f3a9ebb1996c71b6b8099c8b2dc1e0a715ba924fb1825c222ef0fa7104917773ceb2ae4a7e910ac8e9520e1033a0a8c27047c0e51bd099d4b15c8a536a1fcaf61216daf9c2cb84fcc02194a0490c4733ace2c08fd42bfa0f8dc9858fb5323"], 0x50}}, 0x0) 09:01:55 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = gettid() tkill(r0, 0x33) ptrace$setregs(0x8, r0, 0x0, &(0x7f0000000240)="5906f83087487be383d007236e017420f14f3dad") ptrace$cont(0x7, r0, 0x0, 0x0) clone(0x16400, &(0x7f00000000c0)="1a6359ca5ec2131aafa56eb47c2927a8", &(0x7f00000012c0), &(0x7f0000000140), &(0x7f0000000180)="e067aa448668f038f784c81c014abf50018f941499a015bc016563470c5fdc5ddaab2e7d56c0ed3271426f60c78c6b09bd9be52704503d92bd2ac26f7f0e46517a9aa903eb13c0785dbaeae535d8db01aea459a11decf8f6e8e128d52929b6c81b4c220f35d84ef79fe0cba1755be394d945af50d7a1d600213c831f84e07af893f1b63e29ed97e4d47e564aa19da771ae6c3912c393e6bfb1d54f6edf3e3ecdb6c35df82afb647c7376399a464d34da") r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x54040) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)=ANY=[], 0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r2, 0x0) fanotify_mark(0xffffffffffffffff, 0x12, 0x8000038, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={r5, 0x2f2a, 0x1000, "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"}, 0x1008) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 09:01:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r4, 0x4) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:55 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x6, &(0x7f0000000080)="8bcdb23ffafae3afcef70600000024a87a2bd52b00d96baf25ce4403ac896f5d9a42299bb3a281171d8c992e06bf5da1ccbbf9b99cf5f7d63100000000") ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/udp\x00') openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x20040, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x80000000) 09:01:55 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x208000, 0x0) futex(&(0x7f00000000c0)=0x2, 0x8d, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x1, 0x1) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000040)="897302cb02b52d84f7fa1a4c724ce31b616ca5cf24f7ef3c1d70990d4af87d57ddd71f1b98359412e80538b0bf58b9e52c25f930bb7d791f3103bc2e41bd959c7b67eb68d8f31361ab5b7bd6c3f5bf364da471919619add02ba3bae4") 09:01:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:01:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100)="0296b3eec671932d74f91fc6337ff31df03fb0c4e256e4104263ddcee98fa7d21372789f4ef27c", 0x27, 0x1f}, {&(0x7f0000000140)="461b6672d65f8bc4760f01515220897bdb6a56560e7801ff3064d4344fe185c80dcd9d8272172d432e1d9146605f87f82465468e66bc2a2cb3", 0x39, 0xffffffff}, {&(0x7f0000000180)="ee61a2df8c9359f0837a88b4c689cece0d797834f3f050a86898c16537ae29acf294b4f38095f4a2746a227ef456ab23ca66b91789c1d1ba1104e8bed6cb435a761015e23b474df241967319e7907b548e73d5a020120f057ba39fdfb0f363813f7d13a90b38c26b6b3e075cb36b2d25d56b285f4f4a9b6ec725dfc7494692af914840c1e51c2ecb96a1a6a65c9705b616b8255955a13b", 0x97, 0x9}], 0x40040, &(0x7f00000002c0)={[{@nodots='nodots'}], [{@fowner_gt={'fowner>', r1}}, {@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:01:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:55 executing program 3: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x5, 0x0) r0 = syz_open_dev$hidraw(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(0x0, 0xffffffffffffff7c, 0x2202) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"]) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x1e4, &(0x7f0000000500)=ANY=[@ANYBLOB="ea00004e87413f07f5200e7c99d6ab939b25f5c878a3035fa69a4ccfc95abf05e35bbd5cd284409ecfd461e8bc079211975d9e2c7e015d39b8bc245a27c9c6fe54d135c5e0e308a063f9507ea81841087ea0222d67872924bf243116a59666a177387ff9f4036280fd70fd2dc2b40b813f43aba7f8cb0e32fd2ac811baa34240961e871378fac40512bc315c8a9b3b6de70b6e5f15166881ef18c9588864aed8104c129e12eb51f949cb40031ee1ea9ce4242ef92ac62bab430f9add92930f7727e36ee7b283b288a1a9a5ad60dc21754a161c5ea4c81300002300004e95993f4210a4d9c06a0533119072b44eab67ee1576e19f7aba5dfeea3cde8b48573b0c00c600004e418212dbd3641ee75376d35549f4b866bbcc36178e597915f5d68c65a48397ec56812166efa78ea8e7975f887dba1c30becf864b3a84e35e6226e839392856980a8f60710f199dcae9eb45e2abea194d8e294e135b9fe18bc13ba4c397e3b79d9c2b34611f7852f9dbe87bb0729a678efd66dbceac55717029bcb3608ee6efc56f801135411ea9f56ea6b3e67ff29857a19545660cd3efb080cde3353722afea8fdef9d16a01392cd7a55d666722f4c0bc538a452005243fa9c32cf2e1ea1d060dfca2ee1c"]) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000a80)={0xff, 0x0, 0x0, 0x0, "e89f8179d2e21fb45b393386675694ac98f6fae678bd2a2f47101ecb943abec2"}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x41, 0x8a08, 0x0, 0xffffffff, 0x2, 0x1f}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x1, 0x4, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x42601) write$hidraw(r4, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001540)={0x1}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000000c0)=0x2) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)) [ 896.658829][ T2485] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 896.949337][ T12] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 897.038870][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.053890][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 897.064365][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.079732][ T2485] usb 2-1: config 0 descriptor?? [ 897.498815][ T12] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 897.507988][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.516399][ T12] usb 4-1: Product: syz [ 897.521026][ T12] usb 4-1: Manufacturer: syz [ 897.525671][ T12] usb 4-1: SerialNumber: syz [ 897.559795][ T2485] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 897.575905][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input17 [ 897.674383][ T2485] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 897.761630][ T2485] usb 2-1: USB disconnect, device number 19 09:01:57 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:01:57 executing program 2: prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x60) 09:01:57 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}, 0x10}}, 0x0) 09:01:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:01:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) 09:01:57 executing program 2: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil) 09:01:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:01:57 executing program 2: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x3000)=nil) 09:01:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) [ 898.594922][ T2219] IPVS: length: 226 != 8 [ 898.618631][ T17] usb 2-1: new high-speed USB device number 20 using dummy_hcd 09:01:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) [ 898.668321][ T2225] IPVS: length: 226 != 8 [ 898.988592][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.999801][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 899.009093][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.018897][ T17] usb 2-1: config 0 descriptor?? [ 899.038651][ T2485] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 899.439513][ T2485] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 899.448631][ T2485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.457540][ T2485] usb 3-1: config 0 descriptor?? [ 899.499613][ T17] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 899.513607][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input18 09:01:58 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x80044801, 0x0) [ 899.586211][ T12] usb 4-1: USB disconnect, device number 8 [ 899.617249][ T17] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 899.705514][T19641] usb 2-1: USB disconnect, device number 20 [ 899.757268][ T2485] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version f6.d4 found at bus 003 address 004 [ 899.952135][ T17] usb 3-1: USB disconnect, device number 4 09:01:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:01:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 09:01:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x305042, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000001c0)={0x3, 0x1}) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0x8196}, &(0x7f0000000140)=0x8) r9 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r9, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x50}}, 0x0) 09:01:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x17, 0x7, 0x1, {{0xa, '/dev/ptmx\x00'}, 0x8000}}, 0x17) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r0, 0x0) r3 = socket$inet6(0xa, 0x100004, 0x1000) r4 = dup(r3) ppoll(&(0x7f0000000180)=[{}, {r2}], 0x1e, 0x0, 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x40, 0x1, 0x7}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f00000000c0)={0x4, 0x3, 0x5, 0x0, 'syz0\x00', 0x349}) ioctl$TIOCSETD(r2, 0x5437, 0x0) 09:01:59 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x80044801, 0x0) 09:01:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x12000, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) [ 900.558555][T19641] usb 2-1: new high-speed USB device number 21 using dummy_hcd 09:01:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)={0x2, 0x10, 0xff, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x0, @private0, 0x80}}]}, 0x48}}, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0xfffffeff, &(0x7f0000000180)=0x4) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fanotify_mark(r10, 0x51, 0x48001011, r8, 0x0) fanotify_mark(r6, 0x12, 0x8000038, r5, 0x0) r11 = openat2(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402600, 0x81, 0x14}, 0x18) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r11, 0x800455d1, &(0x7f0000000100)) [ 900.718523][ T17] usb 3-1: new high-speed USB device number 5 using dummy_hcd 09:01:59 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x80044801, 0x0) 09:02:00 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x2}}}]}, 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x1, 0xc1, 0x2, 0x2b, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_ident={0x2, 0xb, 0x400, 0x0, 0x1ff}, @sadb_ident={0x2, 0xb, 0x89, 0x0, 0x7}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0xf, 0x12, 0x30}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3f, 0xe0, 0x3c}, @sadb_ident={0x2, 0xa, 0x8000, 0x0, 0x6231}, @sadb_key={0x1a, 0x9, 0x608, 0x0, "60e5dc677b85693a065e34526f6a3ae01828205deacb139c90711efab199768853132b443d2a693c229898b44b405ef4d942ddae12bd34f1c3c8575c9bec959e456602c90293a2a46676d67254a4d5ddb0505f387646a7dc384a52f699054e9835373b0d840ce1afa2aae2d218aed88e8d639e7524c78ecb3771786658b38d843b8496c54c3a8aeb459f89b27bbac3787e721e6ea840e0721a9431a50249ca12bfbac6bfbb8e771a2d25fd62faf5c4eb1647fdff753dbf1944aa22e12c888c2cc1"}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d}]}, 0x158}}, 0x10) r0 = fanotify_init(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f0000000000)=0x8) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r5, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000002c0)) [ 900.928766][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.963769][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 901.002411][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.040682][T19641] usb 2-1: config 0 descriptor?? [ 901.078692][ T17] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 901.104598][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.170875][ T17] usb 3-1: config 0 descriptor?? 09:02:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 09:02:00 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000000)=""/108, &(0x7f0000000240)=""/212, &(0x7f0000000340)=""/174, 0xd000}) dup(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000180)=[{}, {r4}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5437, 0x0) 09:02:00 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x80044801, 0x0) [ 901.458442][ T17] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 901.467030][ T17] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -71 [ 901.507020][ T17] usb 3-1: USB disconnect, device number 5 [ 901.808760][T19641] usbhid 2-1:0.0: can't add hid device: -71 [ 901.814800][T19641] usbhid: probe of 2-1:0.0 failed with error -71 [ 901.839275][T19641] usb 2-1: USB disconnect, device number 21 09:02:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:01 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1886], 0x76b) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) 09:02:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x36, 0x2, 0x10001, 0x1, 0x8, 0x20, "42ca8f1f13f36d737f9fd302d74580ded784a64f3dbdeb41515c43f83069765c2131da64fbd3d3b69cdae097c2d15a958738346b651b"}}, 0x14e) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:02:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fbb930102404009d490b000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 09:02:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 09:02:01 executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) read$usbfs(r4, &(0x7f0000000400)=""/4096, 0x1000) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev}}]}, 0x50}}, 0x0) 09:02:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000000)={0x9, 0x9, 0x800}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1345}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:01 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)={0x0, 0x6, 0x0, &(0x7f0000000000)=0x4}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0x9f0000, 0x7, 0xffffffff, r2, 0x0, &(0x7f0000000080)={0x98091a, 0x8, [], @value64=0x1}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x316, 0x0, 0x20}, 0x9c) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fbb5040221259838944e6d7f8cfbced4635cc655e684079c9ad7811293487c3fcefce72463e9378635020d5c6dcb3f43de3cbb6a518e09868b81cc23487cfe897952c28d08ea258082db558feba3685418909c58d1721909df995fb5a5555d88bcc9fb0976a63ffa5a33313e097e4864a4faf391b2f4b01b07dcd33e8ede8f5b8a48925c029e4c36603a514f8dc9ad40d8fb69e042024fb197eff94e8a184b4bb233c31803b071bef372f75f567ed05b32d397cd"], 0xb5, 0x3) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r6, 0xa84, 0x2, 0x47e}, 0x10) [ 902.581777][ T17] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 902.614958][T19641] usb 2-1: new high-speed USB device number 22 using dummy_hcd 09:02:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) exit_group(0x0) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x840000000002, 0x3, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000340)=""/4097, 0x737412157e5f4ccb, 0x0, 0x0, 0x0) 09:02:01 executing program 2: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000fff000/0x1000)=nil) r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = fanotify_init(0x10, 0x40000) fanotify_mark(r5, 0x40, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fanotify_mark(r7, 0x8, 0x1002, r1, &(0x7f0000000000)='./file0\x00') [ 902.848579][ T17] usb 4-1: Using ep0 maxpacket: 16 09:02:02 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xfff8, 0x2) [ 902.968918][ T17] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 902.982977][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.999122][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.035975][ T17] usb 4-1: config 0 descriptor?? [ 903.052031][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 903.121500][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.198122][T19641] usb 2-1: config 0 descriptor?? [ 903.958341][T19641] usbhid 2-1:0.0: can't add hid device: -71 [ 903.964375][T19641] usbhid: probe of 2-1:0.0 failed with error -71 [ 903.975905][T19641] usb 2-1: USB disconnect, device number 22 09:02:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 09:02:03 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) [ 904.738248][ T1819] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 905.168696][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.186383][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 905.201158][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.218976][ T1819] usb 2-1: config 0 descriptor?? 09:02:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000840) ftruncate(0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000840)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 09:02:04 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000002280)) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000001c0)={{0x1, 0x0, 0x80, {0x1000, 0x100000, 0x5}}, "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", "4abee091a4fd920559b6e6f051f7b1f268a567fd68a64b900482532c44f988893f495699ffc2ba72924b80b39b32cd61942e564ed52a4bae30a8684552e9cbe1e7a9236c7d418f1f8cda3fd7da1fe49ab672974d640b3fcab4a9c93c8d8645f5e1a81c891e1c0874661cf79e52346aa686ff075c1284c0d04d8e115ab1362ca84855959be368ad8b4c63ff356398b943af06b61967a0cccddc936b942475823886cde6b130ef15869358fce9395294b29fa33cab4648405d4c08d7f206e57494a1a436ea7c8cb9de99bdf20080868e185a8a2e37e46a23ed7e87545f420fce06f4bd7bcd9514954df25ab983ad2bded4c63c8c0831e9c519f0d5f094a2b8d7c921990eeb84fa6b0b18f7b1510847263d44b36e159b973fae761d513b9cc5e31af9a1be5e90cde18b5f64ef4e751b3dd5d74b9acafe1c223f0c223126567e7014af5a3f6119f4e703a365274fa11f732ec16cac1217a099e801c14dd95ac50443a008666dd7427386711b523ffccc02de07f3fb311de4f7c200ba0c80a92108d3128b04bf997d26c41e52ae493498f4762951d78de2d01c8d843d934e3592530b53efe26704d8e724de963b725b8cec7b5fd0f7813aadf5339ea810a74f244169b826747c9ca56e3d56493ab38e95ac1944032658a222753c8464c12b412a63ae9e6fcdb35b17af7b0457588ab38cd4ddc7bfc4a1648d1e416d85e3ee6b63849ddd5e107cdbb11cc4d154ef9fe7f201039f1dc1a950b52dd4243198516f81cbadb8db68526fc7ced296d08f9556f3ea886d3cb9d9f7fbfb4153d8797e3cab941e3f05e4d865a60de6dfd04741e68d1fc6d7831929e0d45e801e169014cd8421beeca2fe5010aaa6f39ee8b29fd10cb76de80805ce1423d37708c4489738855642275e8cfaf3d856890e806da8b276829c0169dadae9e52b576d87980033ff7adc204cbd55cf71efa868c4156e6d192d097dea3d467343a39ccea8d3c8f9a082ce237b5a169d42225c4f954662dbbacac768bf8386005c76bccc68a3ebeaba3df56ed99f09c050aec2a0849924c4fb6e12b45588345327e58c0f6feb7c0036c55aaaad70f4907a14b19a696f1c40001524401a0a57c41b0f69cda846f5845c87a3a7d5073e360994c791163218d8fd992637e7134cbd93b54c59eb2fd1a525f9de46e90a4fed8c49ed9c0d5b27a91b805a5bcb0d16c12bc0febccf65e9fabe564160e56f9e244bdf7678d067995cf4c165715bb799e750581c11f0244e64b526b10ea766969cf6ae32dbf813beb2765b2d8ec2298b16161763ac40a6c426238b32f741caf3cfd1e8cfbc94d63920a62e3c48cc5fd5f56959f16ab69e7033715dcd12e3581589e6c914b721e8d095fc7e8ac11eac78fa950522165b16ef84e48ddd536d7f1c042621940f7bb2d884de316646466781d9ddde330033d2ceb61706c10296bc8d0d3a4cc4224ae24709edb2242ba22faaa186adb359aa10be40826acd4ab596a6fc335966b2075cd48b3175cba6cd2eaa60ac46192b534274433bab3896059a6e646d0fb9a4b176e35e7a02c19d0a8b6edc0bceb6737ffbc78a2eb95db96b47e8c8deef9252ab6f4ddcfbc1f65f218fc054522003a81022d71a27a17a41d9ad2761b522efeca1867a424f3d94eec8805d929837020a55764f6947949a32739a8e3223fdf733f3828d5146ea62b5106aaac72d5106e54ca8a4be41641ade461c707f9b5df8d91c556f7cebde45d518b26d385c5dd2d9ffb82155eb3ea6e84e19a050511f14a38403c86606808e472d476902307e8e1ca87ce6d7feba51b3049c36f2c98646f715a13fe8e42183ac3fdc2fd0b0d71a6cf513dbe88bbbd5a085b8ccedc4e2fc49a00dec780b4ad38dcd3c960373f026cf55f3468fc827e4a545d6effb0f6ee69dc578076fb24d608d1f39ee9549f91e298f2e761923d4ac6e0eff1ce8f1bc681fe29c3cc89f53f977c3c30c04d847bd3a98a1f4a9639e68cc675fc5c9e819b21ada29fad5b34ed96154266bba16027bda1b722c9f3b2e837df8176deadb85d40f667c206ae9a1ef6640895cb9f221b9c698dd7c4ba8884a4825af8ff6a7a4cad74ce504987fa7d67696e003c0d7b86ee8fe6bba25a29deded3bae4f63e68f39caecbe6b97b019cd6912da2fb768b4cb554a482aecf13977cf1220163aeaff3b23f2e29c8c053b031d13d992a04cbaf0fd9685d5b145b13467055466169ac58e3b55c6a9d866167df44dfdb362f2e6f9585f8f91d005e99d400cea40bd240800a2822d7725c02f6d2a0dc7b0ccd9426e1a6f942f1e757450f74aac4729e10d1b690cd73763cc47004f9db8a0a296a4161330a0ddbf326d9daf0d6ac0405e3ffac5976d2c251f2f4536fa12c072100145055d4e6d3580ebe4defcc28bd8c9d0a62d50ffd0a6a1fccc8e0967f479b891f8530b2d064f23475b5bae28523aa984746536e5b9780c9fe76bd7e504e117aa4cdbf923002c39fae9b023bd41b9e3c6a40f6e78ad0a62378bb56d9940e79be99a8e413b27b22c4b4b4003a10c53b55fe7bed7d79a70d653ee883abde8448cf1e488cc96a0def120194a3a84592dfd44940d520602c0908b874c19728cc3746c9e8ef4761b94160dfecb0eed4e048107897d5c28f698519430ca8875ec703bb324a81e680576df12e372c744b97a52203984bbaf7c1340f9208fd4797df800fc7a117ce7bfc31fa2e786076aa5658593edb6211c19e90906fa6beca46d3331850e4fb8defdf44c03d58a0ce90dcfe0f69f0a7d64be1f83e1790418ea58d5d1e8fa365bc719f37b4e6bda8d2550e53521b1dbf048f5a6a21dbe1f1ebb2d2a8267bf0c062a8f1d16756b4fcb9daeecfbc9c52704f3f8b37b135b3dd78f7858bb5fa1c0829a18e939e6b484ccdb831c6d6ff8000b62a611541bb18bc9605bff756f26809c542343f9209c1438cab38fe856c8316ed12f1f86c896af2a3d4530e56b2d92790d2ba55d7d78c2fb69d57352ad378a4c5f0dccade37611a63da5b6b94c5cd3c68614e7d1c96343eb9fb0d67076d6178abaf50bb1e22ff64c59e40535431dcf0a9060c1c4746025e43a9017bd8e37d0d726c026d99c963484bbcc984b7eeb4c46b3ed1fd2a74607552c61923b3127907d2f03be24ba2ee252bdb6e6114f100e9fac823393d3d8c3b0601339e2ed51060d932be53b7b9d09932ec8e68a4c35e17ccd07281340cdcc89defb8c697c2c5779324fae4d5bab66618b0fbfee40cf22757128799f60f257ff62684229618cf2bf5341bae60574bdebc0543cad66c3042e11b2ca58af775fb41c9b0484e9d45c6655cc30e2e08c73f93caccb393531c1546efe68196f79ba6d6cf728f78a7b9c0b27188edce932e55c3b50715ced3c79c674123917f9247ab2b2915a16a10b33ab61f7ea3bc0529e00d3e43cc854fea3ad2a99e72cca2d697aa587e14ac95070d50c51f04d4cc07a9871fd04845b1d2c46f3bad633d868a522d2c04d9fd5fb48753c4b3eb30371cf7d419d9d455fda45f983a6e2d0072cf5260b3708064bd3ccbd1bc0c32db363ad3d2d5813355dffceeecc564a872301a57338934d79770256fe95b6112e0eabb970f6122d1178cce43577279cb123e6b8506f5bf0b68d4b4d863391ac5b18640a4157373a2a2397e8b9d847bc0951e001e33ba68a5d5f41b44c23b755e817ce961be2461d6c43f6da86f573e2a54e305711a829a794ff5c35b54d21797c75ac504ae5c5b288994bfd3724105174916dfec1df57bde155ed47dc6d856655c984eeda0db107c93c21a787cea4f00ad7d48a68b462cd9291856c74dc4a1fafc37a57a7c0d66d4c785cc97d01b1af6ec50ebce36ee450b2bce66a8b54bf68baa9e90ee3c889799afba8c2cf89231d0717465d6f2d180d141c776400ee8e57c500fe794e0b116c4b231bde5d1edd85378ed947e7cd4515a16d2ed7f4aef330e61e58866140d1decb65c44809ebb489b8751501e6d2894e5f38094a1438354b56df06387606566d3fc69ceafa0967247f34dc146a54911a287c29a57be4be8238a75b732fab2230d69341bd81544ccb95b5e35775176eb09a989a700dd6a3c03e51b491e3216718e86321d2a7dec7c1da6eccacb3b328ee14148b0a5178def757e94f59bf151c0524a45a1b598e38de15cd29390a751236f19e9888fd53fe87d1964bcdc6147f9c02c353dada7345648f287ee7c49fe8cef7c81568f0968f8e99a0ab6bf734df413def36acde9e8dd762de249cc074239f1ba62f5423c6735fdd59b546305369e06213bf248f9ad5bb22f26a791ed5ec5c369c94f1eaaf0e2ad1f80972b8e5d2ca71bf9974caaf8526084fc37b58228e70b3c7ad39845529688c2a4493428370ceae397e02cdba1b055383d52d44ae0f5cb813935906bacc95d8e2e11942c267c778274a1772d22f45a63a4cceacc3f89ca8d8ea3f5338667ad9416f544e87447f29677dd0e7347255e4250a04013e111da633b1a806388a23d93e790e04eaed5212abfd45e39835e84938eb3295659f7a656558a73f11e320f5e464441b50937e7ae7781f7d7036a4d501ee5c75f0bc139b5ff90828fcedc2d93c79c9cd8951706742c64c8c01e8041f069f6c4a4ff2c0972a37121a6404e3a1e7ccffa9727ceddb3d4db722c8b77e36b2e41efb9220fc71e7803401daba857e9c4a1239f54239d4936611f29c5e7defe0b4ede09d358486572925c88a183fd0f25da643e19b286c5c897dc3a873317fd387b3c05b9185ea259e7ef05c12e00651fc2338551a5b80d4f1f178e33f0323b22ac8e787d80934a6fe3ec565021663fec0ae0f7da1c4016d21f42b07c11eefef425527d7d6a3b832b191081c80c935ea5e800a57ac51e4421eabb16d5d0a57b652e363950515cf3b51782aa21b6d8fa4ac1bddb896760da623dafb8bdc79d6d83bd95b8a012e17155786f5213175f58993d17edd08a477bc31a1e6f0bdc730a6e82c7cf6786585f24d17c56bf840ee6e605e8167551665f14690a0524219b0ca20d774bca96d8b74c54a0a20508915817fab327a2e22c0c4c25ba8473e49aefd840eb122c33a01e9fb56a8822bf71d9a4bac21bfde7273bc0408c356627a1ef48e1e1b6781b7ce9bb0ad443707508b351ab7072a3bf399aa4a2e19c61734d370cb1bf924b251f714c5dca0860d10fc2c24e3aeb95149c9ce1bc9ee4a8b0a65277a19d09dee548bafa7a649556f4e49348285d998a684dd36347f4c2322d44d0a17a22e1ab46464789c24657d0335ed38d094a6cb5c7e3d1953c34a59e7c2a7db7358ded6543e4ef7e676126105b5bb452d8a61a0092a9594e53fbb6877159aff8d94108ffaaed8286538da71139705a9b5ec176a498a11823731b0fa534178d9a1f6c421e1ba7cbe9885a1847237fd150f3c28083b2354049343bb41c4258b03def59bef8eca82bacdea58950a188528c6529803922a7dc836875890864afebc0796fc1480769daace1e6cc83a0361ebf3389197545cf41c52d276fbb63e036f53154a2727addb19df4b08d34b96d11d8204103c5d86e45d26b879ff03fdf0b01a0480e33ed8a1f3f4e454068a5cfcc3cdbefb6cc65ab1152c6a4fbd86ef22d1e843e06a1d91a97cb525dc5e042826492e4ff84975353856691407a48127e71701b81c7fd591243c5819284c6f4bc0688a82d6809a55ab70eb117ed480f5a4fd9b54623743c15c4726ed5c3b31ac00f87f98ecbce1dff1f6d416a6377b6a4d588d18821d7f18c663fb62d3cb67e2e524f57fae5a97ee619f9894117dfe491039ee"}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002240)={@private0={0xfc, 0x0, [], 0x1}, 0x4, 0x0, 0x1, 0x9, 0x3, 0x7}, 0x20) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYBLOB="a80000004b0b883ac2327f718ff372c04cdf1cf9ae5ba4ce42a0472f76fb12d6078ced09bd4622c5cf8a1a3a3e3afa6c4ff796e43f7f9016ca5240701ceeecacaf4594ad64d6bd2767298bc0b29e047eb98dbf55bc0ed24cf54f726c0142696821d81d946feef4cb29c882e2fdd6ee2e3d23751bbd19d00e7c31930bed1d8929dd39b68f73557492aa570a6ca051f9767cd6305356f4c94087ecff26f6333ac108e07fbc628feecf1c83f232"], &(0x7f00000000c0)=0xb0) 09:02:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1a1a03, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x438100, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x0, 0x0, 0xffffffffffffff9c, 0x0) connect$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed={[], 0x10}}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000004001) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/102) r4 = syz_open_pts(r0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xb4043, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x200280bc) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000180)=[{}, {r4}], 0x1e, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5437, 0x0) 09:02:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) epoll_create1(0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 09:02:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) [ 905.296652][ T2482] usb 4-1: USB disconnect, device number 9 09:02:04 executing program 2: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x1000)=nil) 09:02:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x16, 0x13, 0x178, &(0x7f0000000240)="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"}) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:04 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x3000)=nil) 09:02:04 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80200, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="c4e1145c2bb917020000b800f054b6ba000000000f30d9f4c48149d4e3660f7e824f24632f6467450fd1ae0080000066baf80cb866e5d086ef66bafc0cb0f3ee3666f00fb0690ff3420f1ecbc4439968750038", 0x53}], 0x1, 0xf, &(0x7f0000000100), 0x0) [ 905.968398][ T1819] usbhid 2-1:0.0: can't add hid device: -71 [ 905.975962][ T1819] usbhid: probe of 2-1:0.0 failed with error -71 [ 906.026497][ T1819] usb 2-1: USB disconnect, device number 23 09:02:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:05 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x3000)=nil) 09:02:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6(0xa, 0x3, 0x3c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair(0x15, 0x5, 0x9, &(0x7f0000000200)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3ff800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 09:02:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f771c3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 09:02:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce", 0x5}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 906.476150][ T2578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:02:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:05 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8b0229"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) connect$unix(r1, &(0x7f0000000000)=ANY=[], 0x10) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) 09:02:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), 0x4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) [ 906.798196][ T1819] usb 2-1: new high-speed USB device number 24 using dummy_hcd 09:02:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, r6) r8 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pipe2(&(0x7f0000000040), 0x80000) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:06 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0, 0x281008, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x410000, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1001ffffe) creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffdbc4c3) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x35295) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x6}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e22, @multicast2}}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001a40)=""/102390, 0x18ff6}, 0x3}, {{&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000001740)=""/50, 0x32}, {&(0x7f0000001780)=""/105, 0x69}, {&(0x7f000001aa40)=""/102392, 0x18ff8}, {&(0x7f0000001600)=""/105, 0x69}], 0x6, &(0x7f00000018c0)=""/157, 0x9d}, 0x1}], 0x3, 0x40010000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x20000000, 0x2}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xff, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x10048, 0x0, 0x0, 0x6, 0xc5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) clone(0xd48d24434717bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:02:06 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) bind$packet(0xffffffffffffffff, &(0x7f0000000240), 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'vcan0\x00', r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x1e8, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x810, r1, 0xeef36000) [ 907.178464][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.208708][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 907.246434][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.276546][ T1819] usb 2-1: config 0 descriptor?? [ 907.306992][ T2623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 907.426957][ T2623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 908.018036][ T1819] usbhid 2-1:0.0: can't add hid device: -71 [ 908.024028][ T1819] usbhid: probe of 2-1:0.0 failed with error -71 [ 908.036463][ T1819] usb 2-1: USB disconnect, device number 24 09:02:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:07 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000480)="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", 0x200}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:02:07 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@empty=[0x7], @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 09:02:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000180)=[{}, {r4}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5437, 0x0) 09:02:07 executing program 2: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/184) 09:02:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f00000005c0)='tmpfs\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='s']) 09:02:07 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x40000003, {0x4000000007ff}}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) [ 908.558709][ T2669] Dev loop3: unable to read RDB block 1 [ 908.565734][ T2669] loop3: unable to read partition table [ 908.572253][ T2664] tmpfs: Unknown parameter 's' [ 908.591756][ T2669] loop3: partition table beyond EOD, truncated 09:02:07 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200140, 0x21) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) [ 908.612521][ T2669] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 09:02:07 executing program 5: 09:02:07 executing program 4: 09:02:07 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r5, 0x0) mmap$perf(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x50, r5, 0x40) 09:02:07 executing program 5: [ 908.766660][ T2669] Dev loop3: unable to read RDB block 1 [ 908.797338][ T2669] loop3: unable to read partition table [ 908.828009][ T1819] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 908.842097][ T2669] loop3: partition table beyond EOD, truncated [ 908.855278][ T2669] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 909.187994][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.199104][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 909.211483][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.223613][ T1819] usb 2-1: config 0 descriptor?? [ 909.967976][ T1819] usbhid 2-1:0.0: can't add hid device: -71 [ 909.974044][ T1819] usbhid: probe of 2-1:0.0 failed with error -71 [ 909.982478][ T1819] usb 2-1: USB disconnect, device number 25 09:02:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:09 executing program 5: 09:02:09 executing program 4: 09:02:09 executing program 2: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff3000/0xd000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000), 0x8) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r3, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) r9 = fanotify_init(0x0, 0x0) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) fanotify_mark(r9, 0x51, 0x8000038, r11, 0x0) fanotify_mark(r9, 0x12, 0x8000038, r8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r3, r6, 0x18, 0x6, r8}, 0x14) 09:02:09 executing program 3: 09:02:09 executing program 0: r0 = fanotify_init(0x0, 0x1) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000030, r2, 0x0) getpeername(r2, &(0x7f0000000080)=@caif=@util, &(0x7f0000000000)=0x80) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x620000, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000180)=[{}, {r4}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5437, 0x0) 09:02:09 executing program 3: 09:02:09 executing program 4: 09:02:09 executing program 5: 09:02:09 executing program 2: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) write$P9_RLERROR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="139d2b06000a0149292a242d27282f2d2e"], 0x13) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = epoll_create1(0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x6, 0x20, 0xd9, 0x3, 0x0, 0x3f, 0x4000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x52, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x41810, 0x80000000, 0x52e01255, 0x3, 0x8, 0xff, 0xfffe}, 0x0, 0x2, r4, 0x2) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) fanotify_mark(r7, 0x12, 0x8000038, r6, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') fanotify_mark(r2, 0x51, 0x8000038, r6, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xc, 0x1, 0x101, 0x0, r4}) 09:02:09 executing program 4: 09:02:09 executing program 3: [ 910.818004][ T17] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 911.187914][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.198881][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 911.209234][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.226420][ T17] usb 2-1: config 0 descriptor?? [ 911.967925][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 911.973970][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 911.985037][ T17] usb 2-1: USB disconnect, device number 26 09:02:11 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:11 executing program 5: 09:02:11 executing program 4: 09:02:11 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) fanotify_mark(r4, 0x12, 0x8000038, r3, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x20}) r7 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r7, 0x0) 09:02:11 executing program 3: 09:02:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x1d0, 0x4) r4 = dup(r2) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1700}, {}], 0x2, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) fanotify_mark(r8, 0xad, 0x800103c, r4, 0x0) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x20, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:11 executing program 5: 09:02:11 executing program 4: 09:02:11 executing program 3: 09:02:11 executing program 3: 09:02:11 executing program 4: 09:02:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0x44, r1, 0xc694d42685586125, 0x20000, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x44}}, 0x0) 09:02:12 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge_slave_0\x00', 0x400}) 09:02:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 09:02:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x101, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcbf9, 0x0, @perf_bp={0x0, 0x8}, 0x2004, 0x3f, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x3) 09:02:12 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 09:02:12 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:12 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x50d002, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000080)) [ 913.768574][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd 09:02:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) write$P9_RLINK(r4, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r0, 0x0) r7 = socket$inet6(0xa, 0x5, 0xff) r8 = dup(r7) r9 = accept$netrom(r8, &(0x7f0000002540)={{0x3, @null}, [@null, @netrom, @bcast, @default, @bcast, @null, @netrom, @netrom]}, &(0x7f00000025c0)=0x48) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ppoll(&(0x7f0000002600)=[{r9, 0x8000}, {r10, 0x1000}], 0x2, 0x0, 0x0, 0x4c) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5437, 0x0) 09:02:13 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x51, 0x8000038, r2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200400, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) fanotify_mark(r7, 0x12, 0x8000038, r6, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000180)={{0x0, 0xdd}, {0x3f, 0x42}, 0x1, 0x7, 0x81}) 09:02:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 914.138204][ T17] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 914.166003][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.231930][ T2868] IPVS: length: 226 != 8 [ 914.232468][ T17] usb 5-1: config 0 descriptor?? 09:02:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:13 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x12, 0x8000038, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x80000) fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x0, 0x13, r6, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) fanotify_mark(r7, 0x12, 0x8000038, r6, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x2, r4, 0x16, r6}, 0x10) 09:02:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") [ 914.464728][ T2876] IPVS: length: 226 != 8 09:02:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 914.544927][ T17] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version f6.d4 found at bus 005 address 002 [ 914.668938][ T2885] IPVS: length: 226 != 8 09:02:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 914.784558][T18965] usb 5-1: USB disconnect, device number 2 09:02:14 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:14 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x4000)=nil) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xa600, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040891}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004855}, 0x20040000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d0900000000000400001700000d803c004000"], 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x22c, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8fe2}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ecd}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8aab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3f8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd00a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3b6}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x61000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x34e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeef4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20048800}, 0xc800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x1, 0xffff, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008810}, 0x20020040) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r0, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r9 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='/#\x00', r8) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="08f20e551631d03eecb04271f206ea70f705771245f7d849d69672b9f874350999eb", 0x22, r9) 09:02:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x402200) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) fanotify_mark(r6, 0x51, 0x8000038, r8, 0x0) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) fanotify_mark(r10, 0xd2, 0x8000038, r5, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x2, "7bf84a939360303e50bfd64bfeb14f729d81c6f3f08d30d4638d6f72c6c551fa", 0x32314752}) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 915.343474][ T2929] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 915.425417][ T2934] IPVS: length: 226 != 8 [ 915.450844][ T2929] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 09:02:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syzkaller0\x00', 0x10) r1 = socket$inet6(0xa, 0x1, 0xffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SET_FP_MODE(0x2d, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:14 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) keyctl$set_reqkey_keyring(0xe, 0x3) 09:02:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 915.747608][T18965] usb 5-1: new high-speed USB device number 3 using dummy_hcd 09:02:15 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) socket$can_j1939(0x1d, 0x2, 0x7) 09:02:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a00000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000537fb6b9adeebfbd6db7a5e52fc9fb387c5f19ff4b518af4e7ea5a1b0c6cdd"], 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 916.148003][T18965] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 916.157074][T18965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.177903][T18965] usb 5-1: config 0 descriptor?? [ 916.439388][T18965] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version f6.d4 found at bus 005 address 003 [ 916.659609][T18965] usb 5-1: USB disconnect, device number 3 09:02:16 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) 09:02:16 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:16 executing program 2: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x1, 0x1, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x4}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4065c0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = fanotify_init(0x20, 0x1400) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, r3) fanotify_mark(r8, 0x51, 0x8000038, r10, 0x0) fanotify_mark(r8, 0x12, 0x8000038, r7, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x3f}, 0x1}, {0xa, 0x4e20, 0x81, @mcast2, 0x1}, 0x0, [0x4, 0x6, 0x7, 0x8, 0x3fe, 0xa, 0x5, 0x60]}, 0x5c) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x1) 09:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) fanotify_mark(r4, 0x12, 0x8000038, r3, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x101}, 0x4) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = dup(r7) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) [ 917.249443][ T3000] IPVS: length: 226 != 8 09:02:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 917.484598][ T3020] IPVS: length: 226 != 8 09:02:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r7, 0x35d8}, 0x8) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) 09:02:16 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 917.537449][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd 09:02:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x4, @thr={&(0x7f0000000080)="aa456c22aa57cf1f5d1109fba920b313ae24aa9990f6c9d67f1def05cbe240de5e7df7dbda664ed9d9fb39d04bfee526ced504e5dabe0042ea3ef722c2722b1b5c43614cdc3c6605c97a0c3b74d8e50ded53aac04bceeea85bf9", &(0x7f0000000100)}}, &(0x7f0000000180)=0x0) timer_settime(r7, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000200)) r8 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r5, 0x51, 0x8000038, r8, 0x0) ioctl$HIDIOCINITREPORT(r8, 0x4805, 0x0) r9 = socket$inet6(0xa, 0x4, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r10, 0x2202, 0x0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x204000, 0x0) setsockopt$MISDN_TIME_STAMP(r11, 0x0, 0x1, &(0x7f0000000000)=0x10, 0xffffffffffffff14) 09:02:16 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") [ 917.907978][ T17] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 917.932721][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.985332][ T17] usb 5-1: config 0 descriptor?? [ 918.147392][ T1819] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 918.269156][ T17] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version f6.d4 found at bus 005 address 004 [ 918.458504][ T1819] usb 2-1: device descriptor read/64, error 18 [ 918.480628][ T17] usb 5-1: USB disconnect, device number 4 [ 918.867340][ T1819] usb 2-1: device descriptor read/64, error 18 09:02:18 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:18 executing program 2: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002) 09:02:18 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) 09:02:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) dup(r0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x800000fc) r4 = dup(r3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x22000, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x111140, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x30000, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x2, 0x4, 0x0, r6}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r7, 0x0) fanotify_mark(0xffffffffffffffff, 0x12, 0x8000038, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) ppoll(&(0x7f0000000180)=[{}, {r2}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r2, 0x5437, 0x0) 09:02:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xbd) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) [ 919.147535][ T1819] usb 2-1: new high-speed USB device number 28 using dummy_hcd 09:02:18 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x4008001}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000240)={{0x7f, 0x8}, 'port1\x00', 0x38, 0x80800, 0x70000, 0x80000001, 0x4, 0x1, 0x9, 0x0, 0x2, 0x7f}) r6 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r6, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) [ 919.337458][ T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd 09:02:18 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) [ 919.429509][ T1819] usb 2-1: device descriptor read/64, error 18 09:02:18 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/226, &(0x7f0000000000)=0xe2) 09:02:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000000)) [ 919.717914][ T17] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 919.739256][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.790866][ T17] usb 5-1: config 0 descriptor?? [ 919.847428][ T1819] usb 2-1: device descriptor read/64, error 18 [ 919.977482][ T1819] usb usb2-port1: attempt power cycle [ 920.059538][ T17] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version f6.d4 found at bus 005 address 005 [ 920.266864][ T17] usb 5-1: USB disconnect, device number 5 [ 920.687309][ T1819] usb 2-1: new high-speed USB device number 29 using dummy_hcd 09:02:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:19 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) 09:02:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000000)) 09:02:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 09:02:19 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) [ 920.897334][ T1819] usb 2-1: device descriptor read/8, error -71 09:02:20 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) 09:02:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000000)) 09:02:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 09:02:20 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) socket$vsock_stream(0x28, 0x1, 0x0) 09:02:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, 0x0) [ 921.117457][ T1819] usb 2-1: device descriptor read/8, error -71 [ 921.187243][ T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd 09:02:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, 0x0) 09:02:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/226, 0x0) [ 921.568248][ T17] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 921.592260][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.607318][ T1819] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 921.637791][ T17] usb 5-1: config 0 descriptor?? [ 921.707623][ T1819] usb 2-1: Invalid ep0 maxpacket: 0 [ 921.713365][ T1819] usb usb2-port1: unable to enumerate USB device [ 921.917269][ T17] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 921.937730][ T17] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 921.953134][ T17] usb 5-1: USB disconnect, device number 6 09:02:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa100, 0x181000) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4098793163481a04ad6b9360db0b107e9cc74d0bc3f2f92f99504c57e43cabc683a959add7cf5ece87e529d812fa32a60a0a5ed87c39a5d42a1c9428a655997d37e06e0c37f34668348305795dbc82bd111bf818c50cc34fab060c4ee958869d18ffd9800ec5124e893c3ac7a711cee0ddc2560639a84e29cb4aaf904c46f9545b7a1bf2b91a7b85ec148f0e2f86b775a5a21b1be0f7f84b3940cfb865bb644cb4c36d60d092273fb1a64473e035af227cd26fa3073062dbefa6575ba40f89c8b62f8d8f4cd947702b3b01b8a5ee24bd26938423da6a4bcf108346279d3318b9cf", @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf25060000000800310009000000050037000100000008002c000600000008003c00020000000500370001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40910) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x820, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4010) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x408c80, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)={0x15, 0x7, 0x2, {{0x8, '+:${+^\xea:'}, 0x1}}, 0x15) 09:02:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:23 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) 09:02:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fedbdf250600000008000700e0000002150001e5c370729b632f706172747c8d7e0fdee2e95dfef1a2f1494b6974696f6e7300000000080002000700000006000b0029009e818b98588dd69e1d92bbec237f64a2d992306965"], 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r4, 0x22, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '$:]$!#\\:)\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x38, r5, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8000000, 0x11, "0000000000000000001700"}) r7 = syz_open_pts(r6, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = dup(r8) ppoll(&(0x7f0000000180)=[{}, {r7}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5437, 0x0) 09:02:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) recvmsg$can_raw(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/167, 0xa7}], 0x5, &(0x7f0000000480)=""/212, 0xd4}, 0x20) ftruncate(r1, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x12, r1, 0x0) r5 = dup(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x43001000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x20, 0x70bd28, 0x4, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x20}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008840}, 0xf648ce1710917c55) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) [ 924.134159][ T29] audit: type=1800 audit(1593334943.268:16): pid=3259 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16326 res=0 09:02:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 924.197041][ T12] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 924.213449][ T17] usb 6-1: new high-speed USB device number 10 using dummy_hcd 09:02:23 executing program 2: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x0, {0x9, 0x1, 0x0, 0x47a}}) [ 924.337092][T18965] usb 2-1: new high-speed USB device number 31 using dummy_hcd 09:02:23 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) 09:02:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:23 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getpeername$ax25(r1, &(0x7f0000000140)={{0x3, @netrom}, [@bcast, @bcast, @netrom, @null, @netrom, @rose, @null]}, &(0x7f0000000080)=0x48) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000100)) [ 924.587399][ T17] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 924.599836][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.602691][ T12] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 924.610292][T18965] usb 2-1: device descriptor read/64, error 18 [ 924.626743][ T17] usb 6-1: config 0 descriptor?? [ 924.676962][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.695491][ T3303] Unknown ioctl -2147201009 [ 924.700598][ T12] usb 5-1: config 0 descriptor?? [ 924.778922][ T3303] Unknown ioctl -2147201009 [ 924.898812][ T17] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version f6.d4 found at bus 006 address 010 [ 924.957034][ T12] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 924.965666][ T12] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 924.980361][ T12] usb 5-1: USB disconnect, device number 7 [ 925.007164][T18965] usb 2-1: device descriptor read/64, error 18 [ 925.107282][ T17] usb 6-1: USB disconnect, device number 10 [ 925.277080][T18965] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 925.546936][T18965] usb 2-1: device descriptor read/64, error 18 [ 925.936944][T18965] usb 2-1: device descriptor read/64, error 18 [ 926.057098][T18965] usb usb2-port1: attempt power cycle [ 926.766889][T18965] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 926.857236][T18965] usb 2-1: Invalid ep0 maxpacket: 0 09:02:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x20) r4 = syz_open_pts(r0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000180)=[{}, {r4}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5437, 0x0) 09:02:26 executing program 2: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) 09:02:26 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) 09:02:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:26 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7000000, 0x4000010, r0, 0x4000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) 09:02:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:26 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8001, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x1, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x6, 0x8, 0x6a}, &(0x7f00000002c0)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x1f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc45, 0x0, 0x0, 0x0, 0xffff4658}, [@alu={0x4, 0x1, 0xd, 0x5, 0x5, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0x7b}, @ldst={0x2, 0x0, 0x0, 0xb, 0xa, 0x4, 0x1}, @exit, @map={0x18, 0x1, 0x1, 0x0, r0}, @exit, @map={0x18, 0x2, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x45b}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa47, 0x0, 0x0, 0x0, 0xcb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x6, &(0x7f0000000100)=""/6, 0x40f00, 0x0, [], r8, 0x1f, r9, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x3, 0x6}, 0x10, r10}, 0x78) [ 927.276917][ T17] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 927.330493][ T12] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 927.371945][ T3388] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:02:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 927.459883][ T3398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:02:26 executing program 2: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x1000)=nil) [ 927.530299][T18965] usb 2-1: new high-speed USB device number 34 using dummy_hcd 09:02:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 927.651857][ T17] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 927.664630][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.696300][ T17] usb 6-1: config 0 descriptor?? [ 927.747193][ T12] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 927.756942][T18965] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 927.766756][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.771127][T18965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.787100][T18965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.829730][ T12] usb 5-1: config 0 descriptor?? [ 927.840481][T18965] usb 2-1: config 0 descriptor?? [ 927.908139][T18965] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 927.969197][ T17] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version f6.d4 found at bus 006 address 011 [ 928.086851][ T12] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 928.095468][ T12] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 928.136051][ T12] usb 5-1: USB disconnect, device number 8 [ 928.177319][T19641] usb 6-1: USB disconnect, device number 11 09:02:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0x94}}, 0x2, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={r4, 0x20, 0x4097, 0x81, 0x9, 0x7fff, 0x1000, 0x1000, {r7, @in6={{0xa, 0x4e21, 0x1, @empty, 0x2}}, 0xc0, 0xff, 0x9, 0x6, 0x6000000}}, &(0x7f00000000c0)=0xb0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) 09:02:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:29 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:02:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x408000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc231}, {r5, 0x9053}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 930.037430][ T3296] usb 2-1: USB disconnect, device number 34 09:02:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 930.387316][T18965] usb 6-1: new high-speed USB device number 12 using dummy_hcd 09:02:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 930.546908][ T3296] usb 2-1: new high-speed USB device number 35 using dummy_hcd 09:02:29 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:02:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 930.747079][T18965] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 930.771272][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.792415][T18965] usb 6-1: config 0 descriptor?? 09:02:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 930.907001][ T3296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:02:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) epoll_create1(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000000c0)=0x8871, 0x8) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', r3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x18, 0x3}, 'port0\x00', 0xcc, 0x121010, 0x8, 0x0, 0x1, 0x404b, 0x100, 0x0, 0x2, 0x7}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) [ 930.966689][ T3296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 931.017022][ T3296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.042063][ T3296] usb 2-1: config 0 descriptor?? [ 931.059056][T18965] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version f6.d4 found at bus 006 address 012 09:02:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) dup(r2) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400207) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:30 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x90002, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000040)) [ 931.117735][ T3296] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 931.303496][T19641] usb 6-1: USB disconnect, device number 12 09:02:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:02:32 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:02:32 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0\x00', 0x0, r0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffff, 0x6, &(0x7f0000000480)=[{&(0x7f0000000080)="3f4996c652b5dd6d7995d308ad3aefc3ea737ec7c11f708d3ca6e8368f2a8660f37823196353750c77a1d58f383dc29c6a9dc3af9e4dbb7c26951e418514e91c2b2f6f01b14e72e920f6a9c29d87b2ebc8ae4db6e9101cf99c1f0ee4f5e945470e77da593266c361907765ea955042cc22f68729846ff5f7e34a1b9b696e446bdb600b728475b0fae553f7802b3967c5f5ec1820f6ad67ca2acfca264e88c48a94b5131bda360f386bacc18754fae1bba0b0a3b6f85ae0c123c75a9258730ee718cdfa6650aceee05d0be8c922c08d60add3e4bd0c327a9a033c4517b0cbdd32cb40de7e800e1b48533eaf28cb61dd577ee57bfb7e", 0xf5, 0xffffffffffff3d98}, {&(0x7f0000000180)="854986543b5f4104c378dfeecde2f7cd1c6d4dedcb31dffb729aef1e37671e6325d5dbeaddc6725d26a238e465069f1afadd21d89f40ea9c93561c5a9f2826eac36af8aacc7db513c41a4e9c3fc8b678bb497cad177a3aee81edb9bab3ae5fc50e8dc8788527cb9198eafaf26c63785fac55dfe84270b6125c0fff1230d0f5fb06b4dc8cfbbe689766d9d4ce20aa24bde8ddd7329cc49cd65f969b", 0x9b, 0x5}, {&(0x7f0000000240)="37aad45ec1a6c40614b30d0726f505401556a70df7dbac1f486b4ddbe99e5347e16c1d9f9fc7e837bd92aa33f5f6c0b3961025ffa74d8aea62470df022d3f26e4d7ca848f46cb1cddf4e6fa45cf8151bfb65cabadf6c415339", 0x59, 0x5}, {&(0x7f00000002c0)="b5e11e915c94b35662e2d04da58fb21fe358a31aec45c132c6a51a4aa6c21e7f171523eb0e806b59c26bf77a269b97dffeb77da6ec917e753565dd4717a716bf758d87592c6cdbca99ae3d1cfe5e", 0x4e, 0x5}, {&(0x7f0000000340)="81c605cb90a03408ff0f819c318a84f3d0c18a9bf3a97799d243d54fe7e813637279ce792479cd57f183c6", 0x2b, 0x2}, {&(0x7f0000000380)="eb483dd4cd3a92bfb6532a4878e5feb6a75ee9b83cd5532cea8f25a485e5927f22342364acd8a48bfc4248c7cdfae1b4a8fbfdf855169ecf5f737b19089d6e4096b599ae1afee0257ccc51611483eae284a12bd6160f550132370cc120e4fa450a169caed2e50eeb1264fbe47273c437d71b6813fa39120b30f6327502268c2dc9a7348a9688bcf52c470fc2e0b424ef45aed5f1b866738918708f478477f82d8a5586327af779a6dc8b4a8fbeee4bc5830a8e4829466779155f0dd3c6fa2b41a641964235c6fc23113d3a37df51a4029d66d87614b783a8b8f0b8c08e1aeef9a6f499739801246c", 0xe8, 0x400}], 0xa21000, &(0x7f0000000540)={[{@fat=@nfs='nfs'}, {@fat=@gid={'gid', 0x3d, r0}}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9d1c}}], [{@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 09:02:32 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) 09:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000000)) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x2, 0x2}) r4 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1, 0x402}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5437, 0x0) [ 933.232994][ T3296] usb 2-1: USB disconnect, device number 35 09:02:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:32 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:32 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 933.616408][T18965] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 933.656457][ T3296] usb 2-1: new high-speed USB device number 36 using dummy_hcd 09:02:32 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:32 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 933.986837][T18965] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 933.995932][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.011754][T18965] usb 6-1: config 0 descriptor?? [ 934.037071][ T3296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 934.050757][ T3296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 934.068835][ T3296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.095696][ T3296] usb 2-1: config 0 descriptor?? [ 934.137761][ T3296] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 934.276518][T18965] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 934.285101][T18965] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 [ 934.295932][T18965] usb 6-1: USB disconnect, device number 13 [ 934.372062][ T0] NOHZ: local_softirq_pending 08 [ 935.652769][ T0] NOHZ: local_softirq_pending 08 09:02:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:35 executing program 4: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:35 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x731800, 0x16404daa1e1743e6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80080, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) finit_module(r5, &(0x7f0000000000)='/dev/p?\x00x\x00', 0x2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x8d, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:35 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) [ 936.283812][ T3296] usb 2-1: USB disconnect, device number 36 09:02:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:35 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:35 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) [ 936.656431][T18965] usb 6-1: new high-speed USB device number 14 using dummy_hcd 09:02:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:35 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) [ 936.746254][ T3296] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 937.023024][T18965] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 937.039138][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.049801][T18965] usb 6-1: config 0 descriptor?? [ 937.126371][ T3296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.141391][ T3296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 937.150950][ T3296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.164839][ T3296] usb 2-1: config 0 descriptor?? [ 937.207528][ T3296] usbhid 2-1:0.0: can't add hid device: -22 [ 937.207619][ T3296] usbhid: probe of 2-1:0.0 failed with error -22 [ 937.306513][T18965] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 937.315128][T18965] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 [ 937.326100][T18965] usb 6-1: USB disconnect, device number 14 09:02:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:38 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:02:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:38 executing program 4: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup(r2) ppoll(&(0x7f0000000180)=[{}, {r1}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000000)={0x100, 0x4, "c28b5f318ccdd9065b8bf1ab8f57bde9cceccf1e5aa6c4fb", {0x3}, 0xad}) ioctl$TIOCSETD(r1, 0x5437, 0x0) 09:02:38 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) [ 939.343129][ T1819] usb 2-1: USB disconnect, device number 37 09:02:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:02:38 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:02:38 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:02:38 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 939.676340][ T12] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 939.826195][ T1819] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 940.076189][ T12] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 940.085372][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.095617][ T12] usb 6-1: config 0 descriptor?? [ 940.216152][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.227149][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 940.238921][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.254070][ T1819] usb 2-1: config 0 descriptor?? [ 940.307109][ T1819] usbhid 2-1:0.0: can't add hid device: -22 [ 940.313139][ T1819] usbhid: probe of 2-1:0.0 failed with error -22 [ 940.361929][ T12] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 940.370594][ T12] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 [ 940.387662][ T12] usb 6-1: USB disconnect, device number 15 09:02:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:41 executing program 4: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:02:41 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:41 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r4 = dup(r3) ppoll(&(0x7f0000000180)=[{}, {r2}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r2, 0x5437, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000240)=""/106) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r5, 0x51, 0x8000038, r7, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) [ 942.421435][ T3296] usb 2-1: USB disconnect, device number 38 09:02:41 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:02:41 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:02:41 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 942.905937][ T3296] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 943.273929][ T3296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.285894][ T3296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 943.294934][ T3296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.315034][ T3296] usb 2-1: config 0 descriptor?? [ 943.367072][ T3296] usbhid 2-1:0.0: can't add hid device: -22 [ 943.377645][ T3296] usbhid: probe of 2-1:0.0 failed with error -22 09:02:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:44 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:44 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:02:44 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x48000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x80, 0xe1, 0x0, 0x14}) r2 = syz_open_pts(r0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x400000, 0x40) listen(r5, 0x9e2e) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000180)=[{}, {r2}], 0x1e, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r2, 0x5437, 0x0) [ 945.477360][ T3296] usb 2-1: USB disconnect, device number 39 09:02:44 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:02:44 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:02:45 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 945.805979][ T2482] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 945.956403][ T3296] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 946.115876][ T2482] usb 5-1: device descriptor read/64, error 18 [ 946.351987][ T3296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.364561][ T3296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.375519][ T3296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.385145][ T3296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.395288][ T3296] usb 2-1: config 0 descriptor?? [ 946.515726][ T2482] usb 5-1: device descriptor read/64, error 18 [ 946.805701][ T2482] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 946.857151][ T3296] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 946.868599][ T3296] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input19 [ 946.953798][ T3296] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 947.066068][ T1819] usb 2-1: USB disconnect, device number 40 [ 947.125617][ T2482] usb 5-1: device descriptor read/64, error 18 09:02:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:02:46 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:02:46 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 947.566228][ T2482] usb 5-1: device descriptor read/64, error 18 [ 947.692677][ T2482] usb usb5-port1: attempt power cycle [ 947.905644][ T3650] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 948.266858][ T3650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.277830][ T3650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.289313][ T3650] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 948.299035][ T3650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.312727][ T3650] usb 2-1: config 0 descriptor?? [ 948.425607][ T2482] usb 5-1: new high-speed USB device number 11 using dummy_hcd 09:02:47 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:47 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:47 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 948.565664][ T2482] usb 5-1: device descriptor read/8, error -71 09:02:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 948.785903][ T2482] usb 5-1: device descriptor read/8, error -71 [ 948.792915][ T3650] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 948.808359][ T3650] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input20 [ 948.903164][ T3650] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 948.996463][ T1819] usb 2-1: USB disconnect, device number 41 [ 949.295502][ T2482] usb 5-1: new high-speed USB device number 12 using dummy_hcd 09:02:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:48 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 949.485875][ T2482] usb 5-1: device descriptor read/8, error -61 [ 949.755549][ T2482] usb 5-1: device descriptor read/8, error -61 [ 949.805603][T19641] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 949.877959][ T2482] usb usb5-port1: unable to enumerate USB device [ 950.185559][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.196458][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.206880][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 950.216343][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.226352][T19641] usb 2-1: config 0 descriptor?? [ 950.706533][T19641] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 950.717669][T19641] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input21 [ 950.824368][T19641] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 950.922666][T19641] usb 2-1: USB disconnect, device number 42 09:02:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:50 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:50 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:50 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:50 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:50 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:50 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 951.895507][ T12] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 952.065460][T19641] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 952.286023][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.297189][ T12] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 952.306631][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.319504][ T12] usb 2-1: config 0 descriptor?? [ 952.367445][T19641] usb 5-1: device descriptor read/64, error 18 [ 952.775274][T19641] usb 5-1: device descriptor read/64, error 18 [ 953.045324][T19641] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 953.055719][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 953.061745][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 953.070392][ T12] usb 2-1: USB disconnect, device number 43 [ 953.315259][T19641] usb 5-1: device descriptor read/64, error 18 [ 953.716118][T19641] usb 5-1: device descriptor read/64, error 18 [ 953.835342][T19641] usb usb5-port1: attempt power cycle 09:02:53 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:53 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:53 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:53 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") [ 954.555321][T19641] usb 5-1: new high-speed USB device number 15 using dummy_hcd 09:02:53 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 954.685330][T19641] usb 5-1: device descriptor read/8, error -71 09:02:53 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 954.915311][T19641] usb 5-1: device descriptor read/8, error -71 [ 954.925486][ T1819] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 955.335271][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.346322][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 955.357667][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.371246][ T1819] usb 2-1: config 0 descriptor?? [ 955.426490][T19641] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 955.615199][T19641] usb 5-1: device descriptor read/8, error -61 [ 955.895237][T19641] usb 5-1: device descriptor read/8, error -61 [ 956.015971][T19641] usb usb5-port1: unable to enumerate USB device [ 956.115220][ T1819] usbhid 2-1:0.0: can't add hid device: -71 [ 956.121334][ T1819] usbhid: probe of 2-1:0.0 failed with error -71 [ 956.131333][ T1819] usb 2-1: USB disconnect, device number 44 09:02:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:56 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:56 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:57 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:57 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 957.985150][T18965] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 957.996367][ T3296] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 958.145142][ T1070] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 958.275107][T18965] usb 6-1: device descriptor read/64, error 18 [ 958.395135][ T3296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.406371][ T3296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 958.416737][ T3296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.427494][ T3296] usb 2-1: config 0 descriptor?? [ 958.445598][ T1070] usb 5-1: device descriptor read/64, error 18 [ 958.674965][T18965] usb 6-1: device descriptor read/64, error 18 [ 958.834954][ T1070] usb 5-1: device descriptor read/64, error 18 [ 958.944914][T18965] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 959.105069][ T1070] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 959.165070][ T3296] usbhid 2-1:0.0: can't add hid device: -71 [ 959.171532][ T3296] usbhid: probe of 2-1:0.0 failed with error -71 [ 959.183010][ T3296] usb 2-1: USB disconnect, device number 45 [ 959.214990][T18965] usb 6-1: device descriptor read/64, error 18 [ 959.385378][ T1070] usb 5-1: device descriptor read/64, error 18 [ 959.624920][T18965] usb 6-1: device descriptor read/64, error 18 [ 959.745056][T18965] usb usb6-port1: attempt power cycle [ 959.794893][ T1070] usb 5-1: device descriptor read/64, error 18 [ 959.915002][ T1070] usb usb5-port1: attempt power cycle [ 960.464883][T18965] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 960.635260][ T1070] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 960.655331][T18965] usb 6-1: device descriptor read/8, error -61 09:02:59 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:59 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:59 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:02:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:02:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:02:59 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:02:59 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 960.765061][ T1070] usb 5-1: device descriptor read/8, error -71 09:03:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:03:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 960.874887][T18965] usb 6-1: device descriptor read/8, error -71 09:03:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) [ 960.975116][ T1070] usb 5-1: device descriptor read/8, error -71 [ 961.074953][ T17] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 961.386426][T18965] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 961.465563][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.476518][ T1070] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 961.484253][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 961.496300][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.512242][ T17] usb 2-1: config 0 descriptor?? [ 961.576524][T18965] usb 6-1: device descriptor read/8, error -61 [ 961.665088][ T1070] usb 5-1: device descriptor read/8, error -61 [ 961.855279][T18965] usb 6-1: device descriptor read/8, error -61 [ 961.954836][ T1070] usb 5-1: device descriptor read/8, error -61 [ 961.977046][T18965] usb usb6-port1: unable to enumerate USB device [ 962.076371][ T1070] usb usb5-port1: unable to enumerate USB device [ 962.264848][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 962.270982][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 962.282668][ T17] usb 2-1: USB disconnect, device number 46 09:03:02 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:02 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:03:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:03:03 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:03 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:03:03 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) [ 964.144799][ T12] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 964.175669][ T17] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 964.275132][ T1070] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 964.444673][ T17] usb 6-1: device descriptor read/64, error 18 [ 964.554667][ T1070] usb 5-1: no configurations [ 964.554680][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.554703][ T12] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 964.559338][ T1070] usb 5-1: can't read configurations, error -22 [ 964.577064][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.594984][ T12] usb 2-1: config 0 descriptor?? [ 964.724647][ T1070] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 964.844706][ T17] usb 6-1: device descriptor read/64, error 18 [ 965.005475][ T1070] usb 5-1: no configurations [ 965.010470][ T1070] usb 5-1: can't read configurations, error -22 [ 965.018946][ T1070] usb usb5-port1: attempt power cycle [ 965.114585][ T17] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 965.344648][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 965.350813][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 965.362323][ T12] usb 2-1: USB disconnect, device number 47 [ 965.385102][ T17] usb 6-1: device descriptor read/64, error 18 [ 965.734567][ T1070] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 965.774509][ T17] usb 6-1: device descriptor read/64, error 18 [ 965.864751][ T1070] usb 5-1: no configurations [ 965.869531][ T1070] usb 5-1: can't read configurations, error -22 [ 965.895295][ T17] usb usb6-port1: attempt power cycle [ 966.024542][ T1070] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 966.154631][ T1070] usb 5-1: no configurations [ 966.159719][ T1070] usb 5-1: can't read configurations, error -22 [ 966.166576][ T1070] usb usb5-port1: unable to enumerate USB device [ 966.604604][ T17] usb 6-1: new high-speed USB device number 22 using dummy_hcd 09:03:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:03:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 966.804618][ T17] usb 6-1: device descriptor read/8, error -61 09:03:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:03:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) [ 967.027503][ T17] usb 6-1: device descriptor read/8, error -71 09:03:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 967.184618][ T12] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 967.324588][ T1070] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 967.524685][ T17] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 967.554606][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.565866][ T12] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 967.576444][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.588434][ T12] usb 2-1: config 0 descriptor?? [ 967.644975][ T1070] usb 5-1: no configurations [ 967.649740][ T1070] usb 5-1: can't read configurations, error -22 [ 967.754547][ T17] usb 6-1: device descriptor read/8, error -61 [ 967.814667][ T1070] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 968.044572][ T17] usb 6-1: device descriptor read/8, error -61 [ 968.094948][ T1070] usb 5-1: no configurations [ 968.099587][ T1070] usb 5-1: can't read configurations, error -22 [ 968.106133][ T1070] usb usb5-port1: attempt power cycle [ 968.164515][ T17] usb usb6-port1: unable to enumerate USB device [ 968.314534][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 968.320754][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 968.330011][ T12] usb 2-1: USB disconnect, device number 48 [ 968.834441][ T1070] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 968.984505][ T1070] usb 5-1: no configurations [ 968.989620][ T1070] usb 5-1: can't read configurations, error -22 [ 969.164617][ T1070] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 969.324430][ T1070] usb 5-1: no configurations [ 969.330106][ T1070] usb 5-1: can't read configurations, error -22 [ 969.336950][ T1070] usb usb5-port1: unable to enumerate USB device 09:03:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:09 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:03:09 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 09:03:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x6d0, [0x0, 0x20000400, 0x20000430, 0x200008d4], 0x0, &(0x7f0000000200), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x73c) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:09 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 09:03:09 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 09:03:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x6d0, [0x0, 0x20000400, 0x20000430, 0x200008d4], 0x0, &(0x7f0000000200), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x73c) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 970.234420][ T1070] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 970.379890][ T12] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 970.387856][ T2485] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 970.614459][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.625619][ T1070] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 970.635258][ T1070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.647188][ T1070] usb 2-1: config 0 descriptor?? [ 970.664347][ T2485] usb 6-1: device descriptor read/64, error 18 [ 970.674566][ T12] usb 5-1: no configurations [ 970.679194][ T12] usb 5-1: can't read configurations, error -22 [ 970.834286][ T12] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 971.064248][ T2485] usb 6-1: device descriptor read/64, error 18 [ 971.124446][ T12] usb 5-1: no configurations [ 971.129216][ T12] usb 5-1: can't read configurations, error -22 [ 971.135971][ T12] usb usb5-port1: attempt power cycle [ 971.364313][ T1070] usbhid 2-1:0.0: can't add hid device: -71 [ 971.364349][ T2485] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 971.370565][ T1070] usbhid: probe of 2-1:0.0 failed with error -71 [ 971.395526][ T1070] usb 2-1: USB disconnect, device number 49 [ 971.664256][ T2485] usb 6-1: device descriptor read/64, error 18 [ 971.894489][ T12] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 972.054393][ T12] usb 5-1: no configurations [ 972.059023][ T12] usb 5-1: can't read configurations, error -22 [ 972.104311][ T2485] usb 6-1: device descriptor read/64, error 18 [ 972.214338][ T12] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 972.234964][ T2485] usb usb6-port1: attempt power cycle [ 972.364317][ T12] usb 5-1: no configurations [ 972.368953][ T12] usb 5-1: can't read configurations, error -22 [ 972.378037][ T12] usb usb5-port1: unable to enumerate USB device 09:03:12 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:12 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x6d0, [0x0, 0x20000400, 0x20000430, 0x200008d4], 0x0, &(0x7f0000000200), &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000011000000000000008917726f736530000000000000000000000069703665727370616e30000000000000766c616e30000100000000000000000076657468305f766972745f776966690043a4be86bc6f000000ffffffffffffffffffff0000ff00ff0e01000076010000a602000073747000000000000000000000000000000000000000000000000000000000004800000000000000000000008000c90bf7ffaaaaaaaaaa17ffffffff6800000006000000ff0f0000090008000180c2000002ffff00ffffff4e234e2204000010020006000100a50f01040700cb0060086367726f757000000000000000000000000000000000000000000000000000000800000000000000ffff000001000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000100000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000ffffffff000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000000000073797374656d5f753d6f626a6563745f723a636865636b706f6c6963795f657865635f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000010000000dada766c616e3000000000000000000000000000000000000000000000000000000076657468315f746f5f6261746164760076657468305f746f5f62617461647600aaaaaaaaaaaa0000000000ffffffffffffff00ffff0000ffde0000007e010000ce01000073747000000000000000000000000000000000000000000000000000000000004800000000000000100000007a00060004000180c200000e0000ff0000ff000003000000ba000000cc0c6000bbbbbbbbbbbbff008bffffff4e234e21cf3306000100800088c50104ff039c058000040049444c4554494d4552000000000000000000000028000000000000003c03000073797a30000000000000000000000000000000000000000000000000ff030000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a310000000000000000000000000000000000000000000000000800000006000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000006c000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff01000000030000004200000022f0766c616e30000000000000000000000076657468315f766972745f77696669006272696467655f736c6176655f3100006970766c616e30000000000000000000aaaaaaaaaaaa00ff00ff00ffaaaaaaaaaaaa000000ffff00ae000000ae000000de00000064657667726f75700000000000000000000000000000000000000000000000001800000000000000070000000180000000000000040000000800000000000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff01000000090000000000000088a86261746164765f736c6176655f3000006c6f00000000000000000000000000006970766c616e3000000000000000000067726574617030000000000000000000a52eca5e8becff000000ff004bfe2230ae97ff0000ff00006e0000006e000000be0000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000090000000400000000000000"]}, 0x73c) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 972.957933][ T2485] usb 6-1: new high-speed USB device number 26 using dummy_hcd 09:03:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:12 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:12 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 09:03:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:12 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) [ 973.284217][ T17] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 973.414257][T18965] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 973.469502][ T2485] usb 6-1: device not accepting address 26, error -71 [ 973.654159][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.665264][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 973.674369][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.686943][ T17] usb 2-1: config 0 descriptor?? [ 973.784224][T18965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.794486][T18965] usb 5-1: config 0 has no interfaces? [ 973.799952][T18965] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 973.809420][T18965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.822340][T18965] usb 5-1: config 0 descriptor?? [ 973.854150][ T2485] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 974.044186][ T2485] usb 6-1: device descriptor read/8, error -61 [ 974.324301][ T2485] usb 6-1: device descriptor read/8, error -61 [ 974.404055][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 974.410043][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 974.419244][ T17] usb 2-1: USB disconnect, device number 50 [ 974.444345][ T2485] usb usb6-port1: unable to enumerate USB device 09:03:15 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:15 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) 09:03:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:15 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 975.997570][ T1819] usb 5-1: USB disconnect, device number 33 09:03:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:15 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)}, 0x20) 09:03:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:15 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 09:03:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 976.333894][T18965] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 976.481166][ T1819] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 976.488996][T19641] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 976.704051][T18965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.715142][T18965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 976.724674][T18965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.737274][T18965] usb 2-1: config 0 descriptor?? [ 976.784186][T19641] usb 6-1: no configurations [ 976.789439][T19641] usb 6-1: can't read configurations, error -22 [ 976.873976][ T1819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.884454][ T1819] usb 5-1: config 0 has no interfaces? [ 976.889934][ T1819] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 976.901659][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.914552][ T1819] usb 5-1: config 0 descriptor?? [ 976.954066][T19641] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 977.284246][T19641] usb 6-1: no configurations [ 977.288874][T19641] usb 6-1: can't read configurations, error -22 [ 977.295660][T19641] usb usb6-port1: attempt power cycle [ 977.454087][T18965] usbhid 2-1:0.0: can't add hid device: -71 [ 977.460266][T18965] usbhid: probe of 2-1:0.0 failed with error -71 [ 977.471801][T18965] usb 2-1: USB disconnect, device number 51 [ 978.033850][T19641] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 978.184889][T19641] usb 6-1: no configurations [ 978.189522][T19641] usb 6-1: can't read configurations, error -22 [ 978.343771][T19641] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 978.504171][T19641] usb 6-1: no configurations [ 978.508789][T19641] usb 6-1: can't read configurations, error -22 [ 978.516914][T19641] usb usb6-port1: unable to enumerate USB device 09:03:18 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:18 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 09:03:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") [ 979.039613][T19641] usb 5-1: USB disconnect, device number 34 09:03:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:18 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 09:03:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:18 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) [ 979.374295][ T2485] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 979.563854][T19641] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 979.583742][ T17] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 979.763863][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.775411][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 979.785847][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.801826][ T2485] usb 2-1: config 0 descriptor?? [ 979.863773][ T17] usb 6-1: no configurations [ 979.868528][ T17] usb 6-1: can't read configurations, error -22 [ 979.944093][T19641] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.954303][T19641] usb 5-1: config 0 has no interfaces? [ 979.959774][T19641] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 979.969071][T19641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.978724][T19641] usb 5-1: config 0 descriptor?? [ 980.023736][ T17] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 980.303701][ T17] usb 6-1: no configurations [ 980.308362][ T17] usb 6-1: can't read configurations, error -22 [ 980.314921][ T17] usb usb6-port1: attempt power cycle [ 980.524340][ T2485] usbhid 2-1:0.0: can't add hid device: -71 [ 980.530473][ T2485] usbhid: probe of 2-1:0.0 failed with error -71 [ 980.542548][ T2485] usb 2-1: USB disconnect, device number 52 [ 981.023725][ T17] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 981.155489][ T17] usb 6-1: no configurations [ 981.160097][ T17] usb 6-1: can't read configurations, error -22 [ 981.313570][ T17] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 981.443821][ T17] usb 6-1: no configurations [ 981.448442][ T17] usb 6-1: can't read configurations, error -22 [ 981.459567][ T17] usb usb6-port1: unable to enumerate USB device 09:03:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:21 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:21 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") [ 982.113062][ T1819] usb 5-1: USB disconnect, device number 35 09:03:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:21 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:21 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:03:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:21 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) [ 982.460909][T19641] usb 2-1: new high-speed USB device number 53 using dummy_hcd 09:03:21 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) [ 982.583780][ T1819] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 982.670162][ T2485] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 982.853808][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.865026][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 982.875952][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.889866][T19641] usb 2-1: config 0 descriptor?? [ 982.993774][ T2485] usb 6-1: no configurations [ 982.998478][ T2485] usb 6-1: can't read configurations, error -22 [ 983.023385][ T1819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.033736][ T1819] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 983.042826][ T1819] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 983.054359][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.068974][ T1819] usb 5-1: config 0 descriptor?? [ 983.154595][ T2485] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 983.453361][ T2485] usb 6-1: no configurations [ 983.458351][ T2485] usb 6-1: can't read configurations, error -22 [ 983.466297][ T2485] usb usb6-port1: attempt power cycle [ 983.623372][T19641] usbhid 2-1:0.0: can't add hid device: -71 [ 983.629497][T19641] usbhid: probe of 2-1:0.0 failed with error -71 [ 983.640734][T19641] usb 2-1: USB disconnect, device number 53 [ 984.193242][ T2485] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 984.333499][ T2485] usb 6-1: no configurations [ 984.338237][ T2485] usb 6-1: can't read configurations, error -22 [ 984.493181][ T2485] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 984.643200][ T2485] usb 6-1: no configurations [ 984.648182][ T2485] usb 6-1: can't read configurations, error -22 [ 984.655923][ T2485] usb usb6-port1: unable to enumerate USB device 09:03:24 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) [ 985.159998][ T1070] usb 5-1: USB disconnect, device number 36 09:03:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:24 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:24 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:24 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 985.578350][ T17] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 985.613449][ T1070] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 985.712939][ T3650] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 985.953277][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.964505][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 985.973981][ T1070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.984195][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.993242][ T1070] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 986.002209][ T1070] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 986.012034][ T17] usb 2-1: config 0 descriptor?? [ 986.017256][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.030014][ T1070] usb 5-1: config 0 descriptor?? [ 986.083006][ T3650] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.093685][ T3650] usb 6-1: config 0 has no interfaces? [ 986.099166][ T3650] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 986.108524][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.118322][ T3650] usb 6-1: config 0 descriptor?? [ 986.733008][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 986.739148][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 986.752017][ T17] usb 2-1: USB disconnect, device number 54 09:03:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:27 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 988.206888][ T1070] usb 5-1: USB disconnect, device number 37 09:03:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:27 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 988.309557][ T17] usb 6-1: USB disconnect, device number 40 09:03:27 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:27 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) [ 988.612797][ T1070] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 988.662744][ T2485] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 988.742589][ T17] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 988.982830][ T1070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.993171][ T1070] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 989.002148][ T1070] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 989.011459][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.026618][ T1070] usb 5-1: config 0 descriptor?? [ 989.044474][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.055524][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 989.070090][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.080005][ T2485] usb 2-1: config 0 descriptor?? [ 989.112869][ T17] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.123240][ T17] usb 6-1: config 0 has no interfaces? [ 989.128811][ T17] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 989.140410][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.168148][ T17] usb 6-1: config 0 descriptor?? [ 989.573657][ T2485] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 989.594320][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input22 [ 989.703799][ T2485] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 989.780468][ T2485] usb 2-1: USB disconnect, device number 55 09:03:30 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 991.262037][T19641] usb 5-1: USB disconnect, device number 38 09:03:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 991.379070][ T2485] usb 6-1: USB disconnect, device number 41 09:03:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 991.682218][T19641] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 991.712651][ T1819] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 991.872265][ T2485] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 992.072551][T19641] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.081603][T19641] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 992.092010][T19641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.104054][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.118429][T19641] usb 5-1: config 0 descriptor?? [ 992.124928][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 992.134275][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.143763][ T1819] usb 2-1: config 0 descriptor?? [ 992.302144][ T2485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.312487][ T2485] usb 6-1: config 0 has no interfaces? [ 992.318144][ T2485] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 992.327712][ T2485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.340811][ T2485] usb 6-1: config 0 descriptor?? [ 992.643198][ T1819] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 992.654981][ T1819] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input23 [ 992.738993][ T1819] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 992.854650][ T17] usb 2-1: USB disconnect, device number 56 09:03:33 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 994.309914][T19641] usb 5-1: USB disconnect, device number 39 09:03:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:03:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00b69ae567") 09:03:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) [ 994.440701][ T3650] usb 6-1: USB disconnect, device number 42 09:03:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:03:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)}, 0x20) 09:03:33 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) [ 994.741767][ T17] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 994.751686][T19641] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 994.861801][ T3650] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 995.111697][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.122837][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 995.133699][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.141964][T19641] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 995.148366][ T17] usb 2-1: config 0 descriptor?? [ 995.152521][T19641] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 995.165588][T19641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.176622][T19641] usb 5-1: config 0 descriptor?? [ 995.221939][ T3650] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.232458][ T3650] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 995.241464][ T3650] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 995.251255][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.260938][ T3650] usb 6-1: config 0 descriptor?? [ 995.652414][ T17] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 995.668432][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input24 [ 995.761849][ T17] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 995.864088][T19641] usb 2-1: USB disconnect, device number 57 09:03:36 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) [ 997.346998][ T1819] usb 5-1: USB disconnect, device number 40 09:03:36 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:36 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:36 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:03:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 09:03:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) [ 997.513023][ T1070] usb 6-1: USB disconnect, device number 43 09:03:36 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:36 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 09:03:36 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:36 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) [ 997.767656][ T1819] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 997.831383][ T3650] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 997.961253][ T1070] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 998.151594][ T1819] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 998.160608][ T1819] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 998.170116][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.183031][ T1819] usb 5-1: config 0 descriptor?? [ 998.194580][ T3650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.212470][ T3650] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 998.223082][ T3650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.240556][ T3650] usb 2-1: config 0 descriptor?? [ 998.321322][ T1070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.332014][ T1070] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 998.343247][ T1070] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 998.352689][ T1070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.365526][ T1070] usb 6-1: config 0 descriptor?? [ 998.722488][ T3650] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 998.737200][ T3650] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0013/input/input25 [ 998.831436][ T3650] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 999.128426][ T1070] usb 2-1: USB disconnect, device number 58 09:03:39 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:03:39 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1000.388046][ T1819] usb 5-1: USB disconnect, device number 41 09:03:39 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:39 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:03:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 09:03:39 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1000.579816][ T3650] usb 6-1: USB disconnect, device number 44 09:03:39 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:39 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) 09:03:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:39 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:39 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) [ 1000.871006][ T1819] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1000.944169][ T2485] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1001.050822][ T3650] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1001.251230][ T1819] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1001.260300][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.281561][ T1819] usb 5-1: config 0 descriptor?? [ 1001.351289][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.362323][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1001.373415][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.385515][ T2485] usb 2-1: config 0 descriptor?? [ 1001.411020][ T3650] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.421596][ T3650] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1001.430534][ T3650] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1001.442301][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.452316][ T3650] usb 6-1: config 0 descriptor?? [ 1001.530935][ T1819] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 1001.539560][ T1819] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 1001.550435][ T1819] usb 5-1: USB disconnect, device number 42 [ 1001.851937][ T2485] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1001.873254][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0014/input/input26 [ 1001.972271][ T2485] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 09:03:41 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:03:41 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1002.269641][ T3842] usb 2-1: USB disconnect, device number 59 [ 1002.420694][ T2485] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1002.800750][ T2485] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1002.809893][ T2485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.822601][ T2485] usb 5-1: config 0 descriptor?? [ 1003.090684][ T2485] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 1003.099429][ T2485] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 1003.110862][ T2485] usb 5-1: USB disconnect, device number 43 09:03:42 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:03:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:42 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 09:03:42 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 1003.640814][ T3650] usb 6-1: USB disconnect, device number 45 09:03:42 executing program 3: socket$kcm(0xa, 0x2, 0x73) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) 09:03:42 executing program 3: socket$kcm(0xa, 0x2, 0x73) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:43 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:43 executing program 3: socket$kcm(0xa, 0x2, 0x73) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1004.000453][ T2485] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1004.004804][ T4351] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1004.100411][ T3650] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1004.380494][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.380822][ T4351] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1004.391885][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1004.407034][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.412389][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.428489][ T2485] usb 2-1: config 0 descriptor?? [ 1004.435588][ T4351] usb 5-1: config 0 descriptor?? [ 1004.480615][ T3650] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1004.489638][ T3650] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1004.503269][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.522928][ T3650] usb 6-1: config 0 descriptor?? [ 1004.720385][ T4351] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 1004.729056][ T4351] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 1004.745553][ T4351] usb 5-1: USB disconnect, device number 44 [ 1004.921891][ T2485] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 1004.934124][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0015/input/input27 [ 1005.037205][ T2485] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1005.323838][ T2485] usb 2-1: USB disconnect, device number 60 09:03:45 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:45 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:45 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380) ioctl$TIOCSETD(r3, 0x5437, 0x0) 09:03:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) [ 1006.706788][T19641] usb 6-1: USB disconnect, device number 46 09:03:46 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:46 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:46 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:46 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:46 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) [ 1007.040054][ T2485] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1007.260121][T19641] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1007.410968][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.425704][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1007.435137][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.448241][ T2485] usb 2-1: config 0 descriptor?? [ 1007.620336][T19641] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1007.629636][T19641] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1007.639667][T19641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.649578][T19641] usb 6-1: config 0 descriptor?? [ 1007.931179][ T2485] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1007.946108][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0016/input/input28 [ 1008.024792][ T2485] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1008.334079][ T1819] usb 2-1: USB disconnect, device number 61 09:03:48 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f60000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 09:03:48 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:48 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:48 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380) ioctl$TIOCSETD(r3, 0x5437, 0x0) 09:03:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) [ 1009.775318][ T4351] usb 6-1: USB disconnect, device number 47 09:03:49 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672000000000000000000000000060000000000000000fa000000000000ff0200000000000000000000000000017a6078cfa3351d7b3851580000000000"], 0x50}}, 0x0) 09:03:49 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:49 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:49 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, 0x0, 0x0) 09:03:49 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1010.129774][T19641] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1010.199773][ T4351] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1010.521445][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.532415][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1010.543462][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.552932][T19641] usb 2-1: config 0 descriptor?? [ 1010.570660][ T4351] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.579942][ T4351] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1010.588963][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.599664][ T4351] usb 6-1: config 0 descriptor?? [ 1011.030745][T19641] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1011.046416][T19641] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0017/input/input29 [ 1011.135163][T19641] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1011.439832][T19641] usb 2-1: USB disconnect, device number 62 09:03:51 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:03:51 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, 0x0, 0x0) 09:03:51 executing program 3: socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380) ioctl$TIOCSETD(r3, 0x5437, 0x0) 09:03:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) [ 1012.820686][ T4351] usb 6-1: USB disconnect, device number 48 09:03:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, 0x0, 0x0) 09:03:52 executing program 3: socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:52 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:03:52 executing program 3: socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:52 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1013.169392][ T1070] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1013.359241][ T4351] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1013.559249][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.570662][ T1070] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1013.581524][ T1070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.595296][ T1070] usb 2-1: config 0 descriptor?? [ 1013.769205][ T4351] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1013.778240][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.788886][ T4351] usb 6-1: config 0 descriptor?? [ 1014.049233][ T4351] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 1014.057823][ T4351] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 [ 1014.070303][ T1070] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1014.083945][ T4351] usb 6-1: USB disconnect, device number 49 [ 1014.094815][ T1070] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0018/input/input30 [ 1014.194216][ T1070] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1014.486202][ T1070] usb 2-1: USB disconnect, device number 63 09:03:53 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:03:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:03:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:53 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380) [ 1014.925755][T19641] usb 6-1: new high-speed USB device number 50 using dummy_hcd 09:03:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:03:54 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:03:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:54 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1015.289904][T19641] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1015.299347][T19641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.312003][ T2485] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1015.320269][T19641] usb 6-1: config 0 descriptor?? [ 1015.579226][T19641] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 1015.587952][T19641] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 [ 1015.599867][T19641] usb 6-1: USB disconnect, device number 50 [ 1015.678977][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.689994][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1015.699121][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.708155][ T2485] usb 2-1: config 0 descriptor?? 09:03:55 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:03:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={0x0, 0x50}}, 0x0) 09:03:55 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:55 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = fanotify_init(0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x51, 0x8000038, r9, 0x0) [ 1016.181431][ T2485] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 1016.215033][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input31 [ 1016.334969][ T2485] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1016.448900][ T1070] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1016.583052][ T3842] usb 2-1: USB disconnect, device number 64 [ 1016.819128][ T1070] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 1016.828266][ T1070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.843211][ T1070] usb 6-1: config 0 descriptor?? 09:03:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:03:56 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={0x0, 0x50}}, 0x0) 09:03:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fanotify_init(0x0, 0x0) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) [ 1017.098837][ T1070] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 1017.120896][ T1070] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 09:03:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:56 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1017.160998][ T1070] usb 6-1: USB disconnect, device number 51 [ 1017.438851][T19641] usb 2-1: new high-speed USB device number 65 using dummy_hcd 09:03:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={0x0, 0x50}}, 0x0) 09:03:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:56 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:03:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1017.855223][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.866474][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1017.876534][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.887535][T19641] usb 2-1: config 0 descriptor?? [ 1017.928627][ T3650] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1018.288548][ T3650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.299898][ T3650] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1018.309427][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.322060][ T3650] usb 6-1: config 0 descriptor?? [ 1018.389592][T19641] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 1018.404864][T19641] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001A/input/input32 [ 1018.486244][T19641] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1018.796698][ T1070] usb 2-1: USB disconnect, device number 65 [ 1018.798458][ C0] keytouch 0003:0926:3333.001A: usb_submit_urb(ctrl) failed: -19 [ 1018.803816][ T3650] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 1018.828242][ T3650] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001B/input/input33 [ 1019.011902][ T3650] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1019.218656][ T1070] usb 6-1: USB disconnect, device number 52 09:03:58 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) 09:03:58 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:03:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fanotify_init(0x0, 0x0) epoll_create1(0x0) 09:03:58 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) 09:03:58 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) [ 1019.698334][T19641] usb 2-1: new high-speed USB device number 66 using dummy_hcd 09:03:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:03:58 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:03:59 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1020.108729][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.120000][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1020.130637][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.140311][T19641] usb 2-1: config 0 descriptor?? [ 1020.158397][ T1070] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1020.519556][ T1070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.530551][ T1070] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1020.539840][ T1070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.554840][ T1070] usb 6-1: config 0 descriptor?? [ 1020.609490][T19641] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 1020.628046][T19641] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input34 [ 1020.713478][T19641] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1021.011452][ T4351] usb 2-1: USB disconnect, device number 66 [ 1021.039380][ T1070] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1021.057188][ T1070] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001D/input/input35 [ 1021.223634][ T1070] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1021.454608][ T4351] usb 6-1: USB disconnect, device number 53 [ 1021.460734][ C1] keytouch 0003:0926:3333.001D: usb_submit_urb(ctrl) failed: -19 09:04:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:04:00 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:00 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fanotify_init(0x0, 0x0) 09:04:00 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) [ 1021.878218][ T1070] usb 2-1: new high-speed USB device number 67 using dummy_hcd 09:04:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:01 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:01 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d67200"/48], 0x50}}, 0x0) 09:04:01 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:04:01 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:01 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1022.288635][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.306572][ T1070] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1022.318708][ T1070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.328809][ T1070] usb 2-1: config 0 descriptor?? [ 1022.368048][ T4351] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1022.768019][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.782584][ T4351] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1022.792036][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.805199][ T4351] usb 6-1: config 0 descriptor?? [ 1022.811462][ T1070] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 1022.829694][ T1070] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001E/input/input36 [ 1022.930617][ T1070] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1023.222999][ T1070] usb 2-1: USB disconnect, device number 67 [ 1023.305490][ T4351] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 1023.329383][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001F/input/input37 [ 1023.467238][ T4351] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 09:04:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:04:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 09:04:02 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1023.726632][T19641] usb 6-1: USB disconnect, device number 54 [ 1024.077814][ T1070] usb 2-1: new high-speed USB device number 68 using dummy_hcd 09:04:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:04:03 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:03 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:03 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:03 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:03 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) [ 1024.454503][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.480528][ T1070] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1024.510939][ T1070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.525687][ T1070] usb 2-1: config 0 descriptor?? [ 1024.587850][ T4351] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1024.947702][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.958754][ T4351] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1024.969137][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.979970][ T4351] usb 6-1: config 0 descriptor?? [ 1025.018980][ T1070] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1025.036648][ T1070] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0020/input/input38 [ 1025.165115][ T1070] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1025.423026][T19641] usb 2-1: USB disconnect, device number 68 [ 1025.448782][ T4351] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 1025.463337][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0021/input/input39 [ 1025.625142][ T4351] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1025.665992][ T4351] usb 6-1: USB disconnect, device number 55 09:04:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0xe, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9") 09:04:05 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:05 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 09:04:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) ioctl$TCSETXW(r5, 0x5435, &(0x7f0000000040)={0x9, 0x3, [0xff, 0x200, 0x3ff, 0x40, 0xcaf], 0x7ff}) 09:04:05 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:05 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:05 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:05 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:04:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f3924a9e3d672"], 0x50}}, 0x0) [ 1026.257514][ T4351] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1026.487575][ T17] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1026.628536][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.639485][ T4351] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1026.649076][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.658622][ T4351] usb 2-1: config 0 descriptor?? [ 1026.847712][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.858798][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1026.867977][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.881521][ T17] usb 6-1: config 0 descriptor?? [ 1027.138720][ T4351] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 1027.149811][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input40 [ 1027.238743][ T4351] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1027.417390][ T17] usbhid 6-1:0.0: can't add hid device: -71 [ 1027.423512][ T17] usbhid: probe of 6-1:0.0 failed with error -71 [ 1027.432011][ T17] usb 6-1: USB disconnect, device number 56 [ 1027.548904][T19641] usb 2-1: USB disconnect, device number 69 09:04:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:07 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:07 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:04:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) r3 = syz_open_pts(r2, 0x40ea40) r4 = socket$inet6(0xa, 0x3, 0xff) dup(r4) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x1e, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 09:04:07 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:04:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:07 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:07 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) [ 1028.387421][ T17] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1028.398401][T18965] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1028.617238][ T4351] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1028.757296][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.768350][T18965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.779302][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1028.790773][T18965] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1028.800608][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.809278][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.820755][ T17] usb 2-1: config 0 descriptor?? [ 1028.831893][T18965] usb 6-1: config 0 descriptor?? [ 1028.987520][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.998701][ T4351] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1029.009528][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.020033][ T4351] usb 4-1: config 0 descriptor?? [ 1029.338585][ T17] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 1029.350194][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0023/input/input41 [ 1029.387267][T18965] usbhid 6-1:0.0: can't add hid device: -71 [ 1029.393413][T18965] usbhid: probe of 6-1:0.0 failed with error -71 [ 1029.408474][T18965] usb 6-1: USB disconnect, device number 57 [ 1029.462963][ T17] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1029.488193][ T4351] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 1029.529105][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0024/input/input42 [ 1029.658651][ T4351] keytouch 0003:0926:3333.0024: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1029.741063][ T2485] usb 2-1: USB disconnect, device number 70 [ 1029.915350][ T4351] usb 4-1: USB disconnect, device number 10 [ 1029.926990][ C1] keytouch 0003:0926:3333.0024: usb_submit_urb(ctrl) failed: -19 09:04:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c875193f"], 0x50}}, 0x0) 09:04:09 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) socket$kcm(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 09:04:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) syz_open_pts(r2, 0x40ea40) r3 = socket$inet6(0xa, 0x3, 0xff) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 09:04:09 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:04:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:09 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:04:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:09 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, 0x0, 0x0) 09:04:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) [ 1030.586938][ T4351] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1030.616914][ T2485] usb 2-1: new high-speed USB device number 71 using dummy_hcd 09:04:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1030.847452][ T3650] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1030.956967][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.968011][ T4351] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1030.979489][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.987236][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.993769][ T4351] usb 6-1: config 0 descriptor?? [ 1031.005326][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1031.023649][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.035062][ T2485] usb 2-1: config 0 descriptor?? [ 1031.226948][ T3650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.238386][ T3650] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1031.250070][ T3650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.260433][ T3650] usb 4-1: config 0 descriptor?? [ 1031.518135][ T2485] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 1031.528917][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0025/input/input43 [ 1031.547929][ T4351] usbhid 6-1:0.0: can't add hid device: -71 [ 1031.553952][ T4351] usbhid: probe of 6-1:0.0 failed with error -71 [ 1031.577935][ T4351] usb 6-1: USB disconnect, device number 58 [ 1031.612729][ T2485] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1031.748112][ T3650] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 1031.763204][ T3650] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0026/input/input44 [ 1031.853902][ T3650] keytouch 0003:0926:3333.0026: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1031.923961][ T3650] usb 2-1: USB disconnect, device number 71 [ 1032.160884][ T4351] usb 4-1: USB disconnect, device number 11 09:04:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) syz_open_pts(r2, 0x40ea40) socket$inet6(0xa, 0x3, 0xff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2c8"], 0x50}}, 0x0) 09:04:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 1032.756789][T19641] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1032.786640][ T3650] usb 6-1: new high-speed USB device number 59 using dummy_hcd 09:04:12 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 09:04:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) [ 1033.067086][ T2485] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1033.127840][T19641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.144735][T19641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1033.161183][T19641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.164936][ T3650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.180094][T19641] usb 2-1: config 0 descriptor?? [ 1033.192041][ T3650] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1033.201288][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.218195][ T3650] usb 6-1: config 0 descriptor?? [ 1033.426917][ T2485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.439623][ T2485] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1033.450076][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.463105][ T2485] usb 4-1: config 0 descriptor?? [ 1033.658213][T19641] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 1033.669222][T19641] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0027/input/input45 [ 1033.756707][ T3650] usbhid 6-1:0.0: can't add hid device: -71 [ 1033.761563][T19641] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1033.768805][ T3650] usbhid: probe of 6-1:0.0 failed with error -71 [ 1033.814247][ T3650] usb 6-1: USB disconnect, device number 59 [ 1033.947792][ T2485] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 1033.967660][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0028/input/input46 [ 1034.051449][ T2485] keytouch 0003:0926:3333.0028: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1034.111924][ T2485] usb 2-1: USB disconnect, device number 72 [ 1034.361042][T19641] usb 4-1: USB disconnect, device number 12 [ 1034.376431][ C0] keytouch 0003:0926:3333.0028: usb_submit_urb(ctrl) failed: -19 09:04:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x7, &(0x7f0000000440)="95a45a01eeea24") 09:04:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:13 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 09:04:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) syz_open_pts(r2, 0x40ea40) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:13 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 09:04:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2"], 0x50}}, 0x0) 09:04:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1034.866422][ T3842] usb 6-1: new high-speed USB device number 60 using dummy_hcd 09:04:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29ed2"], 0x50}}, 0x0) [ 1034.946353][ T4351] usb 2-1: new high-speed USB device number 73 using dummy_hcd 09:04:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 1035.236363][ T2485] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1035.247049][ T3842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.258404][ T3842] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1035.267982][ T3842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.281762][ T3842] usb 6-1: config 0 descriptor?? [ 1035.336675][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.348476][ T4351] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1035.363011][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.372818][ T4351] usb 2-1: config 0 descriptor?? [ 1035.596342][ T2485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.607540][ T2485] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1035.616736][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.625640][ T2485] usb 4-1: config 0 descriptor?? [ 1035.826334][ T3842] usbhid 6-1:0.0: can't add hid device: -71 [ 1035.832359][ T3842] usbhid: probe of 6-1:0.0 failed with error -71 [ 1035.846985][ T3842] usb 6-1: USB disconnect, device number 60 [ 1035.847434][ T4351] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 1035.883243][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0029/input/input47 [ 1035.981899][ T4351] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1036.107459][ T2485] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 1036.122779][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002A/input/input48 [ 1036.200846][ T2485] keytouch 0003:0926:3333.002A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1036.268417][ T4351] usb 2-1: USB disconnect, device number 73 [ 1036.309038][ T2485] usb 4-1: USB disconnect, device number 13 09:04:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 09:04:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d29e"], 0x50}}, 0x0) 09:04:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 09:04:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) 09:04:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) [ 1037.096275][ T4351] usb 6-1: new high-speed USB device number 61 using dummy_hcd 09:04:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 09:04:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000a000000000000000000000008001200161335d2"], 0x50}}, 0x0) [ 1037.146101][ T3842] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1037.176479][ T2485] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1037.466405][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.477642][ T4351] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1037.488093][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.504522][ T4351] usb 6-1: config 0 descriptor?? [ 1037.546632][ T3842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.565025][ T3842] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1037.575543][ T3842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.586096][ T3842] usb 2-1: config 0 descriptor?? [ 1037.596550][ T2485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.620760][ T2485] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1037.650644][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.674371][ T2485] usb 4-1: config 0 descriptor?? [ 1038.050025][ T4351] usbhid 6-1:0.0: can't add hid device: -71 [ 1038.056278][ T4351] usbhid: probe of 6-1:0.0 failed with error -71 [ 1038.064612][ T4351] usb 6-1: USB disconnect, device number 61 [ 1038.087180][ T3842] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 1038.110489][ T3842] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002B/input/input49 [ 1038.157283][ T2485] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 1038.173296][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002C/input/input50 [ 1038.202443][ T3842] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1038.282020][ T2485] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1038.361599][ T4351] usb 4-1: USB disconnect, device number 14 [ 1038.499324][ T3842] usb 2-1: USB disconnect, device number 74 09:04:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 09:04:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty}}, 0x8, 0x7193, 0x7, 0xfffffffe, 0x3ff}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r8, 0x81, 0x7d8}, 0x8) 09:04:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:18 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 09:04:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty}}, 0x8, 0x7193, 0x7, 0xfffffffe, 0x3ff}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r8, 0x81, 0x7d8}, 0x8) 09:04:18 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty}}, 0x8, 0x7193, 0x7, 0xfffffffe, 0x3ff}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r8, 0x81, 0x7d8}, 0x8) [ 1039.288486][ T7386] FAULT_INJECTION: forcing a failure. [ 1039.288486][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.316008][ T7386] CPU: 0 PID: 7386 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 1039.324623][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.334683][ T7386] Call Trace: [ 1039.337984][ T7386] dump_stack+0x1f0/0x31e [ 1039.342328][ T7386] should_fail+0x38a/0x4e0 [ 1039.346756][ T7386] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1039.352509][ T7386] should_failslab+0x5/0x20 [ 1039.357013][ T7386] __kmalloc+0x74/0x330 [ 1039.361172][ T7386] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1039.366901][ T7386] tomoyo_realpath_from_path+0xd8/0x630 [ 1039.372469][ T7386] tomoyo_path_number_perm+0x18f/0x690 [ 1039.377936][ T7386] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1039.384527][ T7386] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1039.391156][ T7386] security_file_ioctl+0x55/0xb0 [ 1039.396105][ T7386] __se_sys_ioctl+0x48/0x160 [ 1039.400701][ T7386] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.406770][ T7386] do_syscall_64+0x73/0xe0 [ 1039.411195][ T7386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.417089][ T7386] RIP: 0033:0x45cb19 [ 1039.420975][ T7386] Code: Bad RIP value. [ 1039.425033][ T7386] RSP: 002b:00007f41bed9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.433445][ T7386] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 [ 1039.441415][ T7386] RDX: 0000000000000002 RSI: 000000000000540b RDI: 0000000000000003 [ 1039.449388][ T7386] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1039.457352][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1039.465319][ T7386] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f41bed9f6d4 [ 1039.480293][ T4351] usb 2-1: new high-speed USB device number 75 using dummy_hcd 09:04:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty}}, 0x8, 0x7193, 0x7, 0xfffffffe, 0x3ff}, &(0x7f0000000080)=0x98) [ 1039.487985][T18965] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1039.506779][ T7386] ERROR: Out of memory at tomoyo_realpath_from_path. 09:04:18 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 1039.616913][ T7393] FAULT_INJECTION: forcing a failure. [ 1039.616913][ T7393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1039.630137][ T7393] CPU: 1 PID: 7393 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 1039.638720][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.648776][ T7393] Call Trace: [ 1039.652073][ T7393] dump_stack+0x1f0/0x31e [ 1039.656415][ T7393] should_fail+0x38a/0x4e0 [ 1039.660840][ T7393] prepare_alloc_pages+0x28c/0x4a0 [ 1039.665958][ T7393] __alloc_pages_nodemask+0xbc/0x5e0 [ 1039.671248][ T7393] ? __lock_acquire+0x116c/0x2c30 [ 1039.676283][ T7393] kmem_getpages+0x49/0x900 [ 1039.680785][ T7393] ? check_preemption_disabled+0x40/0x240 [ 1039.686509][ T7393] cache_grow_begin+0x7b/0x2e0 [ 1039.691280][ T7393] cache_alloc_refill+0x359/0x3f0 [ 1039.696311][ T7393] ? check_preemption_disabled+0xb0/0x240 [ 1039.702028][ T7393] ? debug_smp_processor_id+0x5/0x20 [ 1039.707318][ T7393] __kmalloc+0x30c/0x330 [ 1039.711567][ T7393] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1039.717290][ T7393] tomoyo_realpath_from_path+0xd8/0x630 [ 1039.722839][ T7393] tomoyo_path_number_perm+0x18f/0x690 [ 1039.728293][ T7393] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1039.734880][ T7393] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1039.741602][ T7393] security_file_ioctl+0x55/0xb0 [ 1039.746547][ T7393] __se_sys_ioctl+0x48/0x160 [ 1039.751141][ T7393] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.757206][ T7393] do_syscall_64+0x73/0xe0 [ 1039.761626][ T7393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.767518][ T7393] RIP: 0033:0x45cb19 [ 1039.771405][ T7393] Code: Bad RIP value. [ 1039.775465][ T7393] RSP: 002b:00007f41bed9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.783875][ T7393] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 [ 1039.791846][ T7393] RDX: 0000000000000002 RSI: 000000000000540b RDI: 0000000000000003 [ 1039.799815][ T7393] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1039.807834][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1039.815806][ T7393] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f41bed9f6d4 [ 1040.086064][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.097130][T18965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.108070][T18965] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1040.119620][ T4351] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1040.129483][T18965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.138265][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.150002][T18965] usb 4-1: config 0 descriptor?? [ 1040.155556][ T4351] usb 2-1: config 0 descriptor?? [ 1040.616870][T18965] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 1040.632328][T18965] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002D/input/input51 [ 1040.662163][ T4351] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 1040.674795][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002E/input/input52 [ 1040.720208][T18965] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1040.783017][ T4351] keytouch 0003:0926:3333.002E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1040.848554][ T4351] usb 4-1: USB disconnect, device number 15 [ 1041.074870][ T2485] usb 2-1: USB disconnect, device number 75 09:04:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) 09:04:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:20 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:20 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) [ 1041.632714][ T7497] FAULT_INJECTION: forcing a failure. [ 1041.632714][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.656276][ T7497] CPU: 0 PID: 7497 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 1041.664892][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.674951][ T7497] Call Trace: [ 1041.678255][ T7497] dump_stack+0x1f0/0x31e [ 1041.682599][ T7497] should_fail+0x38a/0x4e0 [ 1041.687029][ T7497] ? tomoyo_encode2+0x25a/0x560 [ 1041.691883][ T7497] should_failslab+0x5/0x20 [ 1041.696387][ T7497] __kmalloc+0x74/0x330 [ 1041.700550][ T7497] tomoyo_encode2+0x25a/0x560 [ 1041.705239][ T7497] tomoyo_realpath_from_path+0x5d6/0x630 [ 1041.710887][ T7497] tomoyo_path_number_perm+0x18f/0x690 [ 1041.716352][ T7497] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1041.722945][ T7497] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1041.729577][ T7497] security_file_ioctl+0x55/0xb0 [ 1041.734524][ T7497] __se_sys_ioctl+0x48/0x160 [ 1041.739120][ T7497] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1041.745186][ T7497] do_syscall_64+0x73/0xe0 [ 1041.749604][ T7497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1041.755496][ T7497] RIP: 0033:0x45cb19 [ 1041.759378][ T7497] Code: Bad RIP value. [ 1041.763432][ T7497] RSP: 002b:00007f41bed9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.771849][ T7497] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 09:04:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 1041.779813][ T7497] RDX: 0000000000000002 RSI: 000000000000540b RDI: 0000000000000003 [ 1041.787894][ T7497] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1041.795876][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1041.803866][ T7497] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f41bed9f6d4 [ 1041.918647][ T7497] ERROR: Out of memory at tomoyo_realpath_from_path. 09:04:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) 09:04:21 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 1041.965571][ T4351] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1041.976770][ T2485] usb 4-1: new high-speed USB device number 16 using dummy_hcd 09:04:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) 09:04:21 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1042.345979][ T2485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.362945][ T2485] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1042.365818][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.384547][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.403662][ T2485] usb 4-1: config 0 descriptor?? [ 1042.422856][ T4351] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1042.468193][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.510972][ T4351] usb 2-1: config 0 descriptor?? [ 1043.006488][ T4351] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 1043.034302][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002F/input/input53 [ 1043.140071][ T4351] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1043.145514][ T2485] usbhid 4-1:0.0: can't add hid device: -71 [ 1043.193617][ T2485] usbhid: probe of 4-1:0.0 failed with error -71 [ 1043.220212][ T2485] usb 4-1: USB disconnect, device number 16 [ 1043.421832][ T4351] usb 2-1: USB disconnect, device number 76 09:04:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x4, &(0x7f0000000440)="95a45a01") 09:04:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x2, 0x2) 09:04:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) 09:04:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x10, 0x2) 09:04:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 09:04:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x4c01, 0x2) 09:04:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5409, 0x2) 09:04:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) 09:04:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) [ 1044.255343][ T2485] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1044.285936][ T4351] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1044.625525][ T2485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.636467][ T2485] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1044.646922][ T2485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.660014][ T2485] usb 4-1: config 0 descriptor?? [ 1044.695256][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.710339][ T4351] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1044.722506][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.737397][ T4351] usb 2-1: config 0 descriptor?? [ 1045.227347][ T4351] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 1045.238291][ T4351] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0030/input/input54 [ 1045.330014][ T4351] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1045.395376][ T2485] usbhid 4-1:0.0: can't add hid device: -71 [ 1045.401784][ T2485] usbhid: probe of 4-1:0.0 failed with error -71 [ 1045.446668][ T2485] usb 4-1: USB disconnect, device number 17 [ 1045.628351][ T4351] usb 2-1: USB disconnect, device number 77 09:04:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000440)="95") 09:04:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) 09:04:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540c, 0x2) 09:04:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) fanotify_init(0x0, 0x0) epoll_create1(0x0) 09:04:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540d, 0x2) 09:04:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) fanotify_init(0x0, 0x0) 09:04:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5411, 0x2) [ 1046.454938][ T4351] usb 4-1: new high-speed USB device number 18 using dummy_hcd 09:04:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r1, 0x0) 09:04:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5412, 0x2) [ 1046.534966][T18965] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1046.855233][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.866337][ T4351] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1046.876202][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.890080][ T4351] usb 4-1: config 0 descriptor?? [ 1046.945093][T18965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.957292][T18965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1046.968295][T18965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.978793][T18965] usb 2-1: config 0 descriptor?? [ 1047.446866][T18965] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 1047.458129][T18965] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0031/input/input55 [ 1047.549710][T18965] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1047.644819][ T4351] usbhid 4-1:0.0: can't add hid device: -71 [ 1047.650851][ T4351] usbhid: probe of 4-1:0.0 failed with error -71 [ 1047.674437][ T4351] usb 4-1: USB disconnect, device number 18 [ 1047.873306][ T2485] usb 2-1: USB disconnect, device number 78 09:04:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 09:04:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5413, 0x2) 09:04:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) 09:04:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5414, 0x2) 09:04:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5415, 0x2) 09:04:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) close(r0) 09:04:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) close(r0) [ 1048.724696][ T17] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1048.748751][ T2485] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1049.084704][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.096078][ T17] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1049.105625][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.115075][ T17] usb 4-1: config 0 descriptor?? [ 1049.155026][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.172275][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1049.183962][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.194131][ T2485] usb 2-1: config 0 descriptor?? [ 1049.685808][ T2485] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 1049.700914][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0032/input/input56 [ 1049.799702][ T2485] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1049.854700][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 1049.860740][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 1049.910270][ T17] usb 4-1: USB disconnect, device number 19 [ 1050.088028][T18965] usb 2-1: USB disconnect, device number 79 09:04:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5416, 0x2) 09:04:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da00040036090000060000003e000000ff0f000089542a5206b8b439afd2f87e8ef7d419d3d6a5d4c0a19ecc3a9ccc3055591c66b7194b88c673eb8248ebb54806bed3ebd2432b2e3282aa401ac236cbcfba2fca7a0832f75cafff0c8b69559967186957b5708ff5dfda7942ca71659b99796bed5cee5019bc4a70f5ec11b1b8085ee5d1ed30e9e11b99107fff37bed703a94f85d0f66e00b374cf88268a14dc876d6a3a469e4b95298b6bf2fcc153020c7a564305b8b4ecf5a3e2d889b6066ce26764df8d77f52c40bfa1a47722c9da5f4e7d5d9faea0bcfb088e9fdc853e940f2805c151e2f3a1b215597af334347ede9f6b69c25255c83f91cdcd5ac5ba54740f84a5ecbf3c5ffdf1ca9f7384b3833ae8011de967384db05fd86619efa2d096d01c6e816b2cd4bcf2c9b10fe0772a8cfe4a7388fde357231a180eb8c41b09ddf1e781fcb7c91dbeed7e685cf1f5577f1712529ac2940b28fb856239ae31b217a41a68323e7ddcf57707e4825a4e34f4abd82ad484b4732933438debcbea"], 0x1f2) close(r0) 09:04:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:29 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5417, 0x2) 09:04:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(0xffffffffffffffff) 09:04:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2c341, 0x0) 09:04:30 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2c341, 0x0) [ 1050.924512][ T3842] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1050.934494][T18965] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1050.944331][ T2485] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1051.264654][ T3842] usb 6-1: device descriptor read/64, error 18 [ 1051.304394][T18965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.315359][T18965] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1051.324846][T18965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.334709][ T2485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.337598][T18965] usb 4-1: config 0 descriptor?? [ 1051.352375][ T2485] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1051.368339][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.378552][ T2485] usb 2-1: config 0 descriptor?? [ 1051.654287][ T3842] usb 6-1: device descriptor read/64, error 18 [ 1051.865426][ T2485] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 1051.882828][ T2485] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0033/input/input57 [ 1051.944346][ T3842] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1051.970334][ T2485] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1052.094392][T18965] usbhid 4-1:0.0: can't add hid device: -71 [ 1052.100651][T18965] usbhid: probe of 4-1:0.0 failed with error -71 [ 1052.111928][T18965] usb 4-1: USB disconnect, device number 20 [ 1052.254205][ T3842] usb 6-1: device descriptor read/64, error 18 [ 1052.268068][ T2485] usb 2-1: USB disconnect, device number 80 [ 1052.684194][ T3842] usb 6-1: device descriptor read/64, error 18 09:04:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5418, 0x2) 09:04:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(0xffffffffffffffff) [ 1052.810243][ T3842] usb usb6-port1: attempt power cycle [ 1053.084156][ T17] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1053.474605][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.485600][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1053.496220][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.508314][ T17] usb 2-1: config 0 descriptor?? [ 1053.537854][ T3842] usb 6-1: new high-speed USB device number 64 using dummy_hcd 09:04:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:32 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2c341, 0x0) 09:04:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(0xffffffffffffffff) 09:04:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x2) 09:04:32 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 09:04:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) [ 1053.674166][ T3842] usb 6-1: device descriptor read/8, error -71 09:04:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x541d, 0x2) 09:04:32 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) [ 1053.894068][ T3842] usb 6-1: device descriptor read/8, error -71 [ 1053.954032][T18965] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1054.005236][ T17] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 1054.019721][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0034/input/input58 [ 1054.121126][ T17] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1054.364022][T18965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.375043][T18965] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1054.386032][T18965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.393903][ T3842] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1054.401132][T18965] usb 4-1: config 0 descriptor?? [ 1054.417269][ T17] usb 2-1: USB disconnect, device number 81 [ 1054.484215][ T3842] usb 6-1: Invalid ep0 maxpacket: 0 [ 1054.493389][ T3842] usb usb6-port1: unable to enumerate USB device 09:04:34 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 09:04:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x541e, 0x2) [ 1055.154009][T18965] usbhid 4-1:0.0: can't add hid device: -71 [ 1055.160053][T18965] usbhid: probe of 4-1:0.0 failed with error -71 [ 1055.171886][T18965] usb 4-1: USB disconnect, device number 21 09:04:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000440)) 09:04:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x541e, 0x2) 09:04:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:35 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5420, 0x2) 09:04:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) close(r0) 09:04:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5421, 0x2) [ 1057.013805][ T1819] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1057.133554][ T17] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1057.411825][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.413616][ T17] usb 6-1: device descriptor read/64, error 18 [ 1057.422882][ T1819] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1057.440247][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.450388][ T1819] usb 2-1: config 0 descriptor?? [ 1057.823485][ T17] usb 6-1: device descriptor read/64, error 18 [ 1057.934751][ T1819] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 1057.946861][ T1819] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0035/input/input59 [ 1058.053074][ T1819] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1058.093532][ T17] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1058.358959][ T1819] usb 2-1: USB disconnect, device number 82 [ 1058.363959][ T17] usb 6-1: device descriptor read/64, error 18 [ 1058.753486][ T17] usb 6-1: device descriptor read/64, error 18 [ 1058.874496][ T17] usb usb6-port1: attempt power cycle [ 1059.593320][ T17] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1059.683331][ T17] usb 6-1: Invalid ep0 maxpacket: 0 09:04:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) close(r0) 09:04:38 executing program 4: ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x2) 09:04:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5423, 0x2) 09:04:38 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:38 executing program 1 (fault-call:0 fault-nth:0): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) close(r0) 09:04:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5424, 0x2) [ 1059.806726][ T8170] FAULT_INJECTION: forcing a failure. [ 1059.806726][ T8170] name failslab, interval 1, probability 0, space 0, times 0 09:04:39 executing program 4: ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x2) [ 1059.897134][ T8170] CPU: 1 PID: 8170 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1059.905770][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.915830][ T8170] Call Trace: [ 1059.919132][ T8170] dump_stack+0x1f0/0x31e [ 1059.923473][ T8170] should_fail+0x38a/0x4e0 [ 1059.927898][ T8170] ? getname_flags+0xb8/0x610 [ 1059.932585][ T8170] should_failslab+0x5/0x20 [ 1059.937092][ T8170] kmem_cache_alloc+0x53/0x2d0 [ 1059.941861][ T8170] getname_flags+0xb8/0x610 09:04:39 executing program 4: ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x2) 09:04:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5425, 0x2) [ 1059.946364][ T8170] do_sys_openat2+0x40d/0x770 [ 1059.951044][ T8170] __x64_sys_openat+0x1c8/0x1f0 [ 1059.955904][ T8170] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1059.961970][ T8170] do_syscall_64+0x73/0xe0 [ 1059.966395][ T8170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1059.972286][ T8170] RIP: 0033:0x45cb19 [ 1059.976174][ T8170] Code: Bad RIP value. [ 1059.980275][ T8170] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1059.988683][ T8170] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 09:04:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) [ 1059.996656][ T8170] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1060.004645][ T8170] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1060.012635][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1060.020610][ T8170] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1060.133350][ T17] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1060.343340][ T17] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1060.356697][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1060.365901][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.378969][ T17] usb 6-1: config 0 descriptor?? [ 1060.427324][ T17] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 09:04:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(0xffffffffffffffff) 09:04:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5427, 0x2) 09:04:41 executing program 1 (fault-call:0 fault-nth:1): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:41 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") [ 1062.788569][T18965] usb 6-1: USB disconnect, device number 69 [ 1062.879090][ T8216] FAULT_INJECTION: forcing a failure. [ 1062.879090][ T8216] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.935343][ T8216] CPU: 1 PID: 8216 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1062.943968][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1062.954030][ T8216] Call Trace: [ 1062.957324][ T8216] dump_stack+0x1f0/0x31e [ 1062.961663][ T8216] should_fail+0x38a/0x4e0 [ 1062.966092][ T8216] ? __alloc_file+0x26/0x390 [ 1062.970685][ T8216] should_failslab+0x5/0x20 [ 1062.975186][ T8216] kmem_cache_alloc+0x53/0x2d0 [ 1062.979955][ T8216] __alloc_file+0x26/0x390 09:04:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(0xffffffffffffffff) [ 1062.984374][ T8216] ? alloc_empty_file+0x49/0x1b0 [ 1062.989315][ T8216] alloc_empty_file+0xa9/0x1b0 [ 1062.994087][ T8216] path_openat+0xa8/0x37f0 [ 1062.998513][ T8216] ? __lock_acquire+0x116c/0x2c30 [ 1063.003547][ T8216] ? debug_smp_processor_id+0x5/0x20 [ 1063.008835][ T8216] ? perf_trace_lock_acquire+0x97/0x3b0 [ 1063.014470][ T8216] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1063.021074][ T8216] do_filp_open+0x191/0x3a0 [ 1063.025590][ T8216] ? do_raw_spin_unlock+0x134/0x8d0 [ 1063.030805][ T8216] ? _raw_spin_unlock+0x24/0x40 09:04:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(0xffffffffffffffff) [ 1063.035651][ T8216] ? __alloc_fd+0x55c/0x600 [ 1063.040150][ T8216] do_sys_openat2+0x463/0x770 [ 1063.044824][ T8216] __x64_sys_openat+0x1c8/0x1f0 [ 1063.049680][ T8216] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1063.055747][ T8216] do_syscall_64+0x73/0xe0 [ 1063.060166][ T8216] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1063.066140][ T8216] RIP: 0033:0x45cb19 [ 1063.070024][ T8216] Code: Bad RIP value. [ 1063.074096][ T8216] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 09:04:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5428, 0x2) 09:04:42 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) [ 1063.082512][ T8216] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1063.090484][ T8216] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1063.098491][ T8216] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1063.106468][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1063.114447][ T8216] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 09:04:42 executing program 1 (fault-call:0 fault-nth:2): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) [ 1063.213982][ T8230] FAULT_INJECTION: forcing a failure. [ 1063.213982][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.265315][ T8230] CPU: 0 PID: 8230 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 1063.273936][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.279762][ T8236] FAULT_INJECTION: forcing a failure. [ 1063.279762][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.283993][ T8230] Call Trace: [ 1063.284041][ T8230] dump_stack+0x1f0/0x31e [ 1063.284058][ T8230] should_fail+0x38a/0x4e0 [ 1063.284130][ T8230] ? igmp6_group_dropped+0x477/0xca0 [ 1063.284147][ T8230] should_failslab+0x5/0x20 [ 1063.318449][ T8230] kmem_cache_alloc_trace+0x57/0x300 [ 1063.323733][ T8230] ? igmp6_group_dropped+0x158/0xca0 [ 1063.329009][ T8230] igmp6_group_dropped+0x477/0xca0 [ 1063.334128][ T8230] __ipv6_dev_mc_dec+0x26f/0x580 [ 1063.339129][ T8230] addrconf_leave_solict+0x10d/0x1a0 [ 1063.344417][ T8230] __ipv6_dev_ac_dec+0x3f6/0x540 [ 1063.349345][ T8230] ipv6_sock_ac_close+0x28a/0x3b0 [ 1063.354371][ T8230] inet6_release+0x4b/0x70 [ 1063.358783][ T8230] sock_close+0xd8/0x260 [ 1063.363024][ T8230] ? sock_mmap+0x90/0x90 [ 1063.367259][ T8230] __fput+0x2f0/0x750 [ 1063.371250][ T8230] task_work_run+0x137/0x1c0 [ 1063.375837][ T8230] __prepare_exit_to_usermode+0x14c/0x1e0 [ 1063.381551][ T8230] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1063.387602][ T8230] do_syscall_64+0x7f/0xe0 [ 1063.392027][ T8230] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1063.397909][ T8230] RIP: 0033:0x45cb19 [ 1063.401788][ T8230] Code: Bad RIP value. [ 1063.405837][ T8230] RSP: 002b:00007f8cd56d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1063.414237][ T8230] RAX: 0000000000000000 RBX: 00000000004db580 RCX: 000000000045cb19 [ 1063.422199][ T8230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1063.430154][ T8230] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1063.438111][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1063.446071][ T8230] R13: 000000000000007e R14: 0000000000526df2 R15: 00007f8cd56d36d4 [ 1063.457954][T18965] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1063.480141][ T8236] CPU: 1 PID: 8236 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1063.488763][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.498823][ T8236] Call Trace: [ 1063.502118][ T8236] dump_stack+0x1f0/0x31e [ 1063.506452][ T8236] should_fail+0x38a/0x4e0 [ 1063.510872][ T8236] ? security_file_alloc+0x32/0x200 [ 1063.516074][ T8236] should_failslab+0x5/0x20 [ 1063.520577][ T8236] kmem_cache_alloc+0x53/0x2d0 [ 1063.525358][ T8236] security_file_alloc+0x32/0x200 [ 1063.530403][ T8236] __alloc_file+0xd7/0x390 [ 1063.534824][ T8236] alloc_empty_file+0xa9/0x1b0 [ 1063.539599][ T8236] path_openat+0xa8/0x37f0 [ 1063.544017][ T8236] ? __lock_acquire+0x116c/0x2c30 [ 1063.549062][ T8236] ? debug_smp_processor_id+0x5/0x20 [ 1063.554383][ T8236] ? perf_trace_lock_acquire+0x97/0x3b0 [ 1063.559934][ T8236] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1063.566538][ T8236] do_filp_open+0x191/0x3a0 [ 1063.571047][ T8236] ? do_raw_spin_unlock+0x134/0x8d0 [ 1063.576251][ T8236] ? _raw_spin_unlock+0x24/0x40 [ 1063.581103][ T8236] ? __alloc_fd+0x55c/0x600 [ 1063.585622][ T8236] do_sys_openat2+0x463/0x770 [ 1063.590294][ T8236] __x64_sys_openat+0x1c8/0x1f0 [ 1063.595125][ T8236] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1063.601183][ T8236] do_syscall_64+0x73/0xe0 [ 1063.605575][ T8236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1063.611452][ T8236] RIP: 0033:0x45cb19 [ 1063.615314][ T8236] Code: Bad RIP value. [ 1063.619351][ T8236] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1063.627733][ T8236] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1063.635722][ T8236] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1063.643669][ T8236] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1063.651649][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1063.659595][ T8236] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1064.022817][T18965] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1064.035691][T18965] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1064.045137][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.058622][T18965] usb 6-1: config 0 descriptor?? [ 1064.103830][T18965] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 09:04:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x2) 09:04:45 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x2) 09:04:45 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:45 executing program 1 (fault-call:0 fault-nth:3): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) [ 1065.849115][ T1819] usb 6-1: USB disconnect, device number 70 [ 1065.925058][ T8259] FAULT_INJECTION: forcing a failure. [ 1065.925058][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.938075][ T8259] CPU: 0 PID: 8259 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 1065.946741][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.956792][ T8259] Call Trace: [ 1065.960093][ T8259] dump_stack+0x1f0/0x31e [ 1065.964435][ T8259] should_fail+0x38a/0x4e0 [ 1065.968865][ T8259] should_failslab+0x5/0x20 [ 1065.973370][ T8259] kmem_cache_alloc_node+0x64/0x290 [ 1065.978577][ T8259] ? __alloc_skb+0x94/0x4f0 [ 1065.983086][ T8259] __alloc_skb+0x94/0x4f0 [ 1065.987417][ T8259] ? rcu_lock_release+0x9/0x20 [ 1065.992183][ T8259] inet6_rt_notify+0x250/0x500 [ 1065.996991][ T8259] fib6_del+0xf63/0x1360 [ 1066.001233][ T8259] ? fib6_del+0xf11/0x1360 [ 1066.005669][ T8259] ip6_del_rt+0xff/0x200 [ 1066.009915][ T8259] __ipv6_dev_ac_dec+0x473/0x540 [ 1066.014857][ T8259] ipv6_sock_ac_close+0x28a/0x3b0 [ 1066.019888][ T8259] inet6_release+0x4b/0x70 [ 1066.024304][ T8259] sock_close+0xd8/0x260 [ 1066.028549][ T8259] ? sock_mmap+0x90/0x90 [ 1066.032786][ T8259] __fput+0x2f0/0x750 [ 1066.036779][ T8259] task_work_run+0x137/0x1c0 [ 1066.041367][ T8259] __prepare_exit_to_usermode+0x14c/0x1e0 [ 1066.047086][ T8259] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1066.053155][ T8259] do_syscall_64+0x7f/0xe0 [ 1066.057706][ T8259] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1066.063594][ T8259] RIP: 0033:0x45cb19 [ 1066.067478][ T8259] Code: Bad RIP value. 09:04:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5441, 0x2) 09:04:45 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x2) [ 1066.071538][ T8259] RSP: 002b:00007f8cd56d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1066.079951][ T8259] RAX: 0000000000000000 RBX: 00000000004db580 RCX: 000000000045cb19 [ 1066.087930][ T8259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1066.095907][ T8259] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1066.103879][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1066.109041][ T8263] FAULT_INJECTION: forcing a failure. [ 1066.109041][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.111850][ T8259] R13: 000000000000007e R14: 0000000000526df2 R15: 00007f8cd56d36d4 [ 1066.135808][ T8263] CPU: 0 PID: 8263 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1066.144417][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.154469][ T8263] Call Trace: [ 1066.157756][ T8263] dump_stack+0x1f0/0x31e [ 1066.162091][ T8263] should_fail+0x38a/0x4e0 [ 1066.166524][ T8263] ? security_file_alloc+0x32/0x200 [ 1066.171728][ T8263] should_failslab+0x5/0x20 [ 1066.176234][ T8263] kmem_cache_alloc+0x53/0x2d0 [ 1066.181002][ T8263] security_file_alloc+0x32/0x200 [ 1066.186030][ T8263] __alloc_file+0xd7/0x390 [ 1066.190450][ T8263] alloc_empty_file+0xa9/0x1b0 [ 1066.195222][ T8263] path_openat+0xa8/0x37f0 [ 1066.199635][ T8263] ? __lock_acquire+0x116c/0x2c30 [ 1066.204675][ T8263] ? debug_smp_processor_id+0x5/0x20 [ 1066.209956][ T8263] ? perf_trace_lock_acquire+0x97/0x3b0 [ 1066.215498][ T8263] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1066.222098][ T8263] do_filp_open+0x191/0x3a0 [ 1066.226602][ T8263] ? do_raw_spin_unlock+0x134/0x8d0 [ 1066.231801][ T8263] ? _raw_spin_unlock+0x24/0x40 [ 1066.236645][ T8263] ? __alloc_fd+0x55c/0x600 [ 1066.241164][ T8263] do_sys_openat2+0x463/0x770 [ 1066.245851][ T8263] __x64_sys_openat+0x1c8/0x1f0 [ 1066.250711][ T8263] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1066.256861][ T8263] do_syscall_64+0x73/0xe0 [ 1066.261279][ T8263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1066.267180][ T8263] RIP: 0033:0x45cb19 [ 1066.271152][ T8263] Code: Bad RIP value. 09:04:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5450, 0x2) 09:04:45 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x2) [ 1066.275242][ T8263] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1066.283655][ T8263] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1066.291627][ T8263] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1066.299601][ T8263] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1066.307571][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1066.315558][ T8263] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 09:04:45 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x0) [ 1066.455159][ T8280] FAULT_INJECTION: forcing a failure. [ 1066.455159][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.467877][ T8280] CPU: 0 PID: 8280 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 1066.476468][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.486525][ T8280] Call Trace: [ 1066.489814][ T8280] dump_stack+0x1f0/0x31e [ 1066.494166][ T8280] should_fail+0x38a/0x4e0 [ 1066.498689][ T8280] should_failslab+0x5/0x20 [ 1066.503201][ T8280] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 1066.508907][ T8280] ? __kmalloc_node_track_caller+0x37/0x60 [ 1066.514705][ T8280] __kmalloc_node_track_caller+0x37/0x60 [ 1066.520323][ T8280] ? inet6_rt_notify+0x250/0x500 [ 1066.525250][ T8280] __alloc_skb+0xde/0x4f0 [ 1066.529564][ T8280] ? rcu_lock_release+0x9/0x20 [ 1066.534318][ T8280] inet6_rt_notify+0x250/0x500 [ 1066.539071][ T8280] fib6_del+0xf63/0x1360 [ 1066.543300][ T8280] ? fib6_del+0xf11/0x1360 [ 1066.547733][ T8280] ip6_del_rt+0xff/0x200 [ 1066.552053][ T8280] __ipv6_dev_ac_dec+0x473/0x540 [ 1066.556970][ T8280] ipv6_sock_ac_close+0x28a/0x3b0 [ 1066.561982][ T8280] inet6_release+0x4b/0x70 [ 1066.566392][ T8280] sock_close+0xd8/0x260 [ 1066.570629][ T8280] ? sock_mmap+0x90/0x90 [ 1066.574848][ T8280] __fput+0x2f0/0x750 [ 1066.578813][ T8280] task_work_run+0x137/0x1c0 [ 1066.583390][ T8280] __prepare_exit_to_usermode+0x14c/0x1e0 [ 1066.589103][ T8280] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1066.595194][ T8280] do_syscall_64+0x7f/0xe0 [ 1066.599590][ T8280] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1066.605591][ T8280] RIP: 0033:0x45cb19 [ 1066.609490][ T8280] Code: Bad RIP value. [ 1066.613549][ T8280] RSP: 002b:00007f8cd56d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1066.621957][ T8280] RAX: 0000000000000000 RBX: 00000000004db580 RCX: 000000000045cb19 [ 1066.629925][ T8280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1066.637894][ T8280] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1066.645869][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1066.653845][ T8280] R13: 000000000000007e R14: 0000000000526df2 R15: 00007f8cd56d36d4 [ 1066.892453][ T1819] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1067.292691][ T1819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1067.305564][ T1819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1067.314996][ T1819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.327245][ T1819] usb 6-1: config 0 descriptor?? [ 1067.373367][ T1819] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 09:04:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:48 executing program 1 (fault-call:0 fault-nth:4): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x0) 09:04:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5451, 0x2) 09:04:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:48 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) [ 1068.917755][ T17] usb 6-1: USB disconnect, device number 71 [ 1068.979259][ T8304] FAULT_INJECTION: forcing a failure. [ 1068.979259][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.038976][ T8304] CPU: 0 PID: 8304 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1069.047598][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.057792][ T8304] Call Trace: [ 1069.061085][ T8304] dump_stack+0x1f0/0x31e [ 1069.065424][ T8304] should_fail+0x38a/0x4e0 [ 1069.069857][ T8304] ? tomoyo_encode2+0x25a/0x560 [ 1069.074717][ T8304] should_failslab+0x5/0x20 [ 1069.079222][ T8304] __kmalloc+0x74/0x330 [ 1069.083386][ T8304] tomoyo_encode2+0x25a/0x560 09:04:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) [ 1069.088082][ T8304] tomoyo_realpath_from_path+0x5d6/0x630 [ 1069.093723][ T8304] ? memset+0x1f/0x40 [ 1069.097716][ T8304] tomoyo_check_open_permission+0x1b6/0x900 [ 1069.103642][ T8304] security_file_open+0x50/0xc0 [ 1069.108585][ T8304] do_dentry_open+0x3cd/0x1070 [ 1069.113367][ T8304] path_openat+0x278d/0x37f0 [ 1069.118001][ T8304] do_filp_open+0x191/0x3a0 [ 1069.122525][ T8304] ? _raw_spin_unlock+0x24/0x40 [ 1069.127374][ T8304] ? __alloc_fd+0x55c/0x600 [ 1069.131893][ T8304] do_sys_openat2+0x463/0x770 [ 1069.136581][ T8304] __x64_sys_openat+0x1c8/0x1f0 [ 1069.141440][ T8304] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.147509][ T8304] do_syscall_64+0x73/0xe0 [ 1069.151935][ T8304] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.157828][ T8304] RIP: 0033:0x45cb19 [ 1069.161715][ T8304] Code: Bad RIP value. [ 1069.165779][ T8304] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1069.174192][ T8304] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 09:04:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x0) 09:04:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5452, 0x2) 09:04:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x2b}, 0x0, 0x1, 0x0, 0x0, 0x401}, 0x20) close(r0) [ 1069.182163][ T8304] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1069.190145][ T8304] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1069.198122][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1069.206097][ T8304] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1069.243922][ T8304] ERROR: Out of memory at tomoyo_realpath_from_path. 09:04:48 executing program 1 (fault-call:0 fault-nth:5): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:48 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) [ 1069.363736][ T8328] FAULT_INJECTION: forcing a failure. [ 1069.363736][ T8328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1069.377165][ T8328] CPU: 0 PID: 8328 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1069.385836][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.395906][ T8328] Call Trace: [ 1069.399203][ T8328] dump_stack+0x1f0/0x31e [ 1069.402204][ T17] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1069.403529][ T8328] should_fail+0x38a/0x4e0 [ 1069.403550][ T8328] prepare_alloc_pages+0x28c/0x4a0 [ 1069.403565][ T8328] __alloc_pages_nodemask+0xbc/0x5e0 [ 1069.403580][ T8328] ? __lock_acquire+0x116c/0x2c30 [ 1069.430903][ T8328] kmem_getpages+0x49/0x900 [ 1069.435412][ T8328] ? check_preemption_disabled+0x40/0x240 [ 1069.441140][ T8328] cache_grow_begin+0x7b/0x2e0 [ 1069.445917][ T8328] cache_alloc_refill+0x359/0x3f0 [ 1069.450948][ T8328] ? check_preemption_disabled+0xb0/0x240 [ 1069.456673][ T8328] ? debug_smp_processor_id+0x5/0x20 [ 1069.461962][ T8328] __kmalloc+0x30c/0x330 [ 1069.466201][ T8328] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1069.471927][ T8328] tomoyo_realpath_from_path+0xd8/0x630 [ 1069.477472][ T8328] ? memset+0x1f/0x40 [ 1069.481447][ T8328] tomoyo_check_open_permission+0x1b6/0x900 [ 1069.487370][ T8328] security_file_open+0x50/0xc0 [ 1069.492226][ T8328] do_dentry_open+0x3cd/0x1070 [ 1069.496999][ T8328] path_openat+0x278d/0x37f0 [ 1069.501628][ T8328] do_filp_open+0x191/0x3a0 [ 1069.506145][ T8328] ? _raw_spin_unlock+0x24/0x40 [ 1069.510994][ T8328] ? __alloc_fd+0x55c/0x600 [ 1069.515507][ T8328] do_sys_openat2+0x463/0x770 [ 1069.520314][ T8328] __x64_sys_openat+0x1c8/0x1f0 [ 1069.525170][ T8328] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.531237][ T8328] do_syscall_64+0x73/0xe0 [ 1069.535669][ T8328] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.541559][ T8328] RIP: 0033:0x45cb19 [ 1069.545444][ T8328] Code: Bad RIP value. [ 1069.549503][ T8328] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1069.557907][ T8328] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1069.565879][ T8328] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1069.573865][ T8328] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1069.581841][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1069.589815][ T8328] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1069.614869][ T8327] FAULT_INJECTION: forcing a failure. [ 1069.614869][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.629009][ T8327] CPU: 1 PID: 8327 Comm: syz-executor.4 Not tainted 5.8.0-rc2-syzkaller #0 [ 1069.637599][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.647677][ T8327] Call Trace: [ 1069.650954][ T8327] dump_stack+0x1f0/0x31e [ 1069.655273][ T8327] should_fail+0x38a/0x4e0 [ 1069.659689][ T8327] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1069.665415][ T8327] should_failslab+0x5/0x20 [ 1069.669933][ T8327] __kmalloc+0x74/0x330 [ 1069.674067][ T8327] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1069.679810][ T8327] tomoyo_realpath_from_path+0xd8/0x630 [ 1069.685342][ T8327] tomoyo_path_number_perm+0x18f/0x690 [ 1069.690778][ T8327] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1069.697365][ T8327] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1069.703982][ T8327] security_file_ioctl+0x55/0xb0 [ 1069.708910][ T8327] __se_sys_ioctl+0x48/0x160 [ 1069.713480][ T8327] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.719532][ T8327] do_syscall_64+0x73/0xe0 [ 1069.723952][ T8327] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.729839][ T8327] RIP: 0033:0x45cb19 [ 1069.733722][ T8327] Code: Bad RIP value. [ 1069.737781][ T8327] RSP: 002b:00007f2fbce21c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.746189][ T8327] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 [ 1069.754144][ T8327] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1069.762091][ T8327] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1069.770040][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1069.777988][ T8327] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f2fbce226d4 [ 1069.803804][ T8327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1070.039394][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.050438][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1070.061000][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.070651][ T17] usb 6-1: config 0 descriptor?? [ 1070.113001][ T17] usbhid 6-1:0.0: can't add hid device: -22 [ 1070.119039][ T17] usbhid: probe of 6-1:0.0 failed with error -22 09:04:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0xfd}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, 0x20) close(r0) pipe2(&(0x7f0000000000), 0x104800) 09:04:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x545d, 0x2) 09:04:51 executing program 1 (fault-call:0 fault-nth:6): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:51 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) [ 1071.978281][ T1819] usb 6-1: USB disconnect, device number 72 [ 1072.055892][ T8353] FAULT_INJECTION: forcing a failure. [ 1072.055892][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.083394][ T8355] FAULT_INJECTION: forcing a failure. [ 1072.083394][ T8355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1072.096621][ T8355] CPU: 0 PID: 8355 Comm: syz-executor.4 Not tainted 5.8.0-rc2-syzkaller #0 09:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) r4 = fanotify_init(0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) fcntl$dupfd(r5, 0x0, r7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f00000001c0)=0x7fffffff) fanotify_mark(r4, 0x51, 0x8000038, r6, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x8, 0x8204, 0x20, 0x18000, 0x7, 0x94ff, 0x2, r3}, &(0x7f0000000080)=0x20) close(r0) [ 1072.105205][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.115262][ T8355] Call Trace: [ 1072.118560][ T8355] dump_stack+0x1f0/0x31e [ 1072.122904][ T8355] should_fail+0x38a/0x4e0 [ 1072.127345][ T8355] prepare_alloc_pages+0x28c/0x4a0 [ 1072.132464][ T8355] __alloc_pages_nodemask+0xbc/0x5e0 [ 1072.137770][ T8355] ? __lock_acquire+0x116c/0x2c30 [ 1072.142801][ T8355] kmem_getpages+0x49/0x900 [ 1072.147305][ T8355] ? check_preemption_disabled+0x40/0x240 [ 1072.153025][ T8355] cache_grow_begin+0x7b/0x2e0 [ 1072.157794][ T8355] cache_alloc_refill+0x359/0x3f0 [ 1072.162824][ T8355] ? check_preemption_disabled+0xb0/0x240 [ 1072.168544][ T8355] ? debug_smp_processor_id+0x5/0x20 [ 1072.173836][ T8355] __kmalloc+0x30c/0x330 [ 1072.178181][ T8355] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1072.183914][ T8355] tomoyo_realpath_from_path+0xd8/0x630 [ 1072.189474][ T8355] tomoyo_path_number_perm+0x18f/0x690 [ 1072.194938][ T8355] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1072.201529][ T8355] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1072.208159][ T8355] security_file_ioctl+0x55/0xb0 [ 1072.213111][ T8355] __se_sys_ioctl+0x48/0x160 [ 1072.217709][ T8355] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.223778][ T8355] do_syscall_64+0x73/0xe0 [ 1072.228200][ T8355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.234098][ T8355] RIP: 0033:0x45cb19 [ 1072.237982][ T8355] Code: Bad RIP value. [ 1072.242216][ T8355] RSP: 002b:00007f2fbce21c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.250733][ T8355] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 [ 1072.258710][ T8355] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1072.266709][ T8355] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1072.274678][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1072.282649][ T8355] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f2fbce226d4 [ 1072.291737][ T8353] CPU: 1 PID: 8353 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1072.300335][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.310393][ T8353] Call Trace: [ 1072.313695][ T8353] dump_stack+0x1f0/0x31e [ 1072.318039][ T8353] should_fail+0x38a/0x4e0 [ 1072.322467][ T8353] ? tomoyo_encode2+0x25a/0x560 [ 1072.327327][ T8353] should_failslab+0x5/0x20 [ 1072.331828][ T8353] __kmalloc+0x74/0x330 [ 1072.335989][ T8353] tomoyo_encode2+0x25a/0x560 [ 1072.340674][ T8353] tomoyo_realpath_from_path+0x5d6/0x630 [ 1072.346306][ T8353] ? memset+0x1f/0x40 [ 1072.350293][ T8353] tomoyo_check_open_permission+0x1b6/0x900 09:04:51 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5460, 0x2) [ 1072.356219][ T8353] security_file_open+0x50/0xc0 [ 1072.361075][ T8353] do_dentry_open+0x3cd/0x1070 [ 1072.365855][ T8353] path_openat+0x278d/0x37f0 [ 1072.370488][ T8353] do_filp_open+0x191/0x3a0 [ 1072.375093][ T8353] ? _raw_spin_unlock+0x24/0x40 [ 1072.379943][ T8353] ? __alloc_fd+0x55c/0x600 [ 1072.384461][ T8353] do_sys_openat2+0x463/0x770 [ 1072.389149][ T8353] __x64_sys_openat+0x1c8/0x1f0 [ 1072.394011][ T8353] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.400078][ T8353] do_syscall_64+0x73/0xe0 [ 1072.403345][ T8370] FAULT_INJECTION: forcing a failure. [ 1072.403345][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.404490][ T8353] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.404498][ T8353] RIP: 0033:0x45cb19 [ 1072.404501][ T8353] Code: Bad RIP value. [ 1072.404506][ T8353] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1072.404513][ T8353] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1072.404518][ T8353] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1072.404522][ T8353] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1072.404526][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1072.404530][ T8353] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1072.455112][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.455660][ T8370] CPU: 0 PID: 8370 Comm: syz-executor.4 Not tainted 5.8.0-rc2-syzkaller #0 [ 1072.455666][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.455674][ T8370] Call Trace: [ 1072.508084][ T8370] dump_stack+0x1f0/0x31e [ 1072.512412][ T8370] should_fail+0x38a/0x4e0 [ 1072.516829][ T8370] ? __tty_buffer_request_room+0x1f3/0x540 [ 1072.522629][ T8370] should_failslab+0x5/0x20 [ 1072.527124][ T8370] __kmalloc+0x74/0x330 [ 1072.531277][ T8370] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1072.537861][ T8370] __tty_buffer_request_room+0x1f3/0x540 [ 1072.543500][ T8370] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 1072.549750][ T8370] pty_write+0xda/0x180 [ 1072.553911][ T8370] tty_send_xchar+0x1d4/0x440 [ 1072.558582][ T8370] ? n_tty_write+0x1170/0x1170 [ 1072.563343][ T8370] tty_ioctl+0xf81/0x15c0 [ 1072.567668][ T8370] ? do_vfs_ioctl+0x6bc/0x16d0 [ 1072.572432][ T8370] ? tty_do_resize+0x180/0x180 [ 1072.577187][ T8370] __se_sys_ioctl+0xf9/0x160 [ 1072.581786][ T8370] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.587844][ T8370] do_syscall_64+0x73/0xe0 [ 1072.592344][ T8370] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.598227][ T8370] RIP: 0033:0x45cb19 [ 1072.602113][ T8370] Code: Bad RIP value. [ 1072.606168][ T8370] RSP: 002b:00007f2fbce21c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.614573][ T8370] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 [ 1072.622538][ T8370] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1072.630517][ T8370] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1072.638485][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1072.646457][ T8370] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f2fbce226d4 [ 1072.654457][ C0] 09:04:51 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/197) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x4, 0x1ff}, {0x6, 0x7ff}]}, 0x14, 0x3) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x4010ae74, &(0x7f0000000040)={0x5ec, 0xfffffffa, 0x6}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r5) 09:04:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") [ 1072.654462][ C0] ====================================================== [ 1072.654466][ C0] WARNING: possible circular locking dependency detected [ 1072.654469][ C0] 5.8.0-rc2-syzkaller #0 Not tainted [ 1072.654473][ C0] ------------------------------------------------------ [ 1072.654476][ C0] syz-executor.4/8370 is trying to acquire lock: [ 1072.654479][ C0] ffffffff892e7020 (console_owner){-.-.}-{0:0}, at: console_trylock_spinning+0x11a/0x380 [ 1072.654490][ C0] [ 1072.654493][ C0] but task is already holding lock: 09:04:51 executing program 2: close(0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x46000, 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r3 = socket(0x11, 0xa, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000180)="cf8900cf24a86fcc6a16d02d903be4cceded14190da353a0ef3160b09c887a6e72822c645730fd76375b0ee39265a31bef2af7e97b1bb562c5bc037d28f48ba754348a267e18d70d85428027", 0x4c}], 0x1, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x51, 0x8000038, r7, 0x0) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f0000000080)) [ 1072.654495][ C0] ffff8880a6837158 (&port->lock#2){-.-.}-{2:2}, at: pty_write+0xb6/0x180 [ 1072.654506][ C0] [ 1072.654510][ C0] which lock already depends on the new lock. [ 1072.654511][ C0] [ 1072.654513][ C0] [ 1072.654516][ C0] the existing dependency chain (in reverse order) is: [ 1072.654518][ C0] [ 1072.654519][ C0] -> #2 (&port->lock#2){-.-.}-{2:2}: [ 1072.654530][ C0] lock_acquire+0x160/0x720 [ 1072.654532][ C0] _raw_spin_lock_irqsave+0x9e/0xc0 [ 1072.654535][ C0] tty_port_tty_get+0x21/0xe0 [ 1072.654537][ C0] tty_port_default_wakeup+0x11/0x40 [ 1072.654540][ C0] serial8250_tx_chars+0x5ea/0x800 [ 1072.654542][ C0] serial8250_handle_irq+0x2fd/0x3e0 [ 1072.654545][ C0] serial8250_default_handle_irq+0xac/0x190 [ 1072.654548][ C0] serial8250_interrupt+0x93/0x180 [ 1072.654551][ C0] __handle_irq_event_percpu+0x1b7/0x610 [ 1072.654553][ C0] handle_irq_event+0xbd/0x280 [ 1072.654556][ C0] handle_edge_irq+0x245/0xbf0 [ 1072.654558][ C0] asm_call_on_stack+0xf/0x20 [ 1072.654561][ C0] common_interrupt+0x1ef/0x3c0 [ 1072.654564][ C0] asm_common_interrupt+0x1e/0x40 [ 1072.654566][ C0] native_safe_halt+0xe/0x10 [ 1072.654568][ C0] acpi_safe_halt+0x87/0xe0 [ 1072.654571][ C0] acpi_idle_enter+0x3f4/0xac0 [ 1072.654574][ C0] cpuidle_enter_state+0x2d7/0x7b0 [ 1072.654576][ C0] cpuidle_enter+0x59/0x90 [ 1072.654579][ C0] do_idle+0x49c/0x650 [ 1072.654581][ C0] cpu_startup_entry+0x15/0x20 [ 1072.654583][ C0] start_secondary+0x1b2/0x1e0 [ 1072.654586][ C0] secondary_startup_64+0xa4/0xb0 [ 1072.654588][ C0] [ 1072.654589][ C0] -> #1 (&port->lock){-.-.}-{2:2}: [ 1072.654599][ C0] lock_acquire+0x160/0x720 [ 1072.654601][ C0] _raw_spin_lock_irqsave+0x9e/0xc0 [ 1072.654604][ C0] serial8250_console_write+0x13e/0xd60 [ 1072.654607][ C0] console_unlock+0x90c/0xec0 [ 1072.654610][ C0] vprintk_emit+0x1f8/0x3c0 [ 1072.654612][ C0] printk+0x62/0x83 [ 1072.654615][ C0] register_console+0x7ca/0xad0 [ 1072.654617][ C0] univ8250_console_init+0x41/0x43 [ 1072.654620][ C0] console_init+0x52/0x97 [ 1072.654622][ C0] start_kernel+0x426/0x777 [ 1072.654625][ C0] secondary_startup_64+0xa4/0xb0 [ 1072.654627][ C0] [ 1072.654629][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 1072.654637][ C0] validate_chain+0x1b0c/0x8920 [ 1072.654639][ C0] __lock_acquire+0x116c/0x2c30 [ 1072.654641][ C0] lock_acquire+0x160/0x720 [ 1072.654643][ C0] console_trylock_spinning+0x13a/0x380 [ 1072.654646][ C0] vprintk_emit+0x1db/0x3c0 [ 1072.654648][ C0] printk+0x62/0x83 [ 1072.654650][ C0] should_fail+0x36c/0x4e0 [ 1072.654652][ C0] should_failslab+0x5/0x20 [ 1072.654654][ C0] __kmalloc+0x74/0x330 [ 1072.654657][ C0] __tty_buffer_request_room+0x1f3/0x540 [ 1072.654660][ C0] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 1072.654663][ C0] pty_write+0xda/0x180 [ 1072.654665][ C0] tty_send_xchar+0x1d4/0x440 [ 1072.654668][ C0] tty_ioctl+0xf81/0x15c0 [ 1072.654670][ C0] __se_sys_ioctl+0xf9/0x160 [ 1072.654673][ C0] do_syscall_64+0x73/0xe0 [ 1072.654675][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.654676][ C0] [ 1072.654679][ C0] other info that might help us debug this: [ 1072.654680][ C0] [ 1072.654681][ C0] Chain exists of: [ 1072.654682][ C0] console_owner --> &port->lock --> &port->lock#2 [ 1072.654692][ C0] [ 1072.654694][ C0] Possible unsafe locking scenario: [ 1072.654695][ C0] [ 1072.654697][ C0] CPU0 CPU1 [ 1072.654699][ C0] ---- ---- [ 1072.654700][ C0] lock(&port->lock#2); [ 1072.654705][ C0] lock(&port->lock); [ 1072.654710][ C0] lock(&port->lock#2); [ 1072.654715][ C0] lock(console_owner); [ 1072.654720][ C0] [ 1072.654722][ C0] *** DEADLOCK *** [ 1072.654723][ C0] [ 1072.654726][ C0] 4 locks held by syz-executor.4/8370: [ 1072.654727][ C0] #0: ffff888089d8f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1072.654737][ C0] #1: ffff888089d8f130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_send_xchar+0x140/0x440 [ 1072.654747][ C0] #2: ffff888089d8f2e8 (&tty->termios_rwsem){++++}-{3:3}, at: tty_send_xchar+0x170/0x440 [ 1072.654757][ C0] #3: ffff8880a6837158 (&port->lock#2){-.-.}-{2:2}, at: pty_write+0xb6/0x180 [ 1072.654767][ C0] [ 1072.654769][ C0] stack backtrace: [ 1072.654772][ C0] CPU: 0 PID: 8370 Comm: syz-executor.4 Not tainted 5.8.0-rc2-syzkaller #0 [ 1072.654776][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.654778][ C0] Call Trace: [ 1072.654780][ C0] dump_stack+0x1f0/0x31e [ 1072.654782][ C0] print_circular_bug+0xc72/0xea0 [ 1072.654785][ C0] ? stack_trace_save+0xad/0x150 [ 1072.654786][ C0] ? save_trace+0x49/0xba0 [ 1072.654788][ C0] check_noncircular+0x1fb/0x3a0 [ 1072.654791][ C0] validate_chain+0x1b0c/0x8920 [ 1072.654793][ C0] ? mark_lock+0x102/0x1b00 [ 1072.654795][ C0] ? __lock_acquire+0x116c/0x2c30 [ 1072.654798][ C0] __lock_acquire+0x116c/0x2c30 [ 1072.654801][ C0] ? debug_smp_processor_id+0x5/0x20 [ 1072.654803][ C0] ? perf_trace_lock_acquire+0x97/0x3b0 [ 1072.654806][ C0] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1072.654809][ C0] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1072.654811][ C0] lock_acquire+0x160/0x720 [ 1072.654814][ C0] ? console_trylock_spinning+0x11a/0x380 [ 1072.654817][ C0] ? vprintk_emit+0x120/0x3c0 [ 1072.654819][ C0] console_trylock_spinning+0x13a/0x380 [ 1072.654822][ C0] ? console_trylock_spinning+0x11a/0x380 [ 1072.654824][ C0] vprintk_emit+0x1db/0x3c0 [ 1072.654826][ C0] printk+0x62/0x83 [ 1072.654828][ C0] should_fail+0x36c/0x4e0 [ 1072.654831][ C0] ? __tty_buffer_request_room+0x1f3/0x540 [ 1072.654833][ C0] should_failslab+0x5/0x20 [ 1072.654835][ C0] __kmalloc+0x74/0x330 [ 1072.654838][ C0] ? trace_event_raw_event_lock_acquire+0x1f0/0x1f0 [ 1072.654841][ C0] __tty_buffer_request_room+0x1f3/0x540 [ 1072.654843][ C0] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 1072.654845][ C0] pty_write+0xda/0x180 [ 1072.654848][ C0] tty_send_xchar+0x1d4/0x440 [ 1072.654850][ C0] ? n_tty_write+0x1170/0x1170 [ 1072.654853][ C0] tty_ioctl+0xf81/0x15c0 [ 1072.654855][ C0] ? do_vfs_ioctl+0x6bc/0x16d0 [ 1072.654857][ C0] ? tty_do_resize+0x180/0x180 [ 1072.654860][ C0] __se_sys_ioctl+0xf9/0x160 [ 1072.654862][ C0] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.654865][ C0] do_syscall_64+0x73/0xe0 [ 1072.654867][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.654870][ C0] RIP: 0033:0x45cb19 [ 1072.654872][ C0] Code: Bad RIP value. [ 1072.654874][ C0] RSP: 002b:00007f2fbce21c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.654880][ C0] RAX: ffffffffffffffda RBX: 00000000004eec40 RCX: 000000000045cb19 [ 1072.654884][ C0] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1072.654888][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1072.654891][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1072.654894][ C0] R13: 0000000000000559 R14: 00000000004c8208 R15: 00007f2fbce226d4 [ 1073.481600][ T17] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1073.761573][ T17] usb 4-1: device descriptor read/64, error 18 [ 1073.821534][ T1819] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1074.151482][ T17] usb 4-1: device descriptor read/64, error 18 [ 1074.201625][ T1819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.212541][ T1819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1074.221849][ T1819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.233769][ T1819] usb 6-1: config 0 descriptor?? [ 1074.285389][ T1819] usbhid 6-1:0.0: can't add hid device: -22 [ 1074.291850][ T1819] usbhid: probe of 6-1:0.0 failed with error -22 [ 1074.421479][ T17] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1074.691428][ T17] usb 4-1: device descriptor read/64, error 18 [ 1075.081387][ T17] usb 4-1: device descriptor read/64, error 18 [ 1075.201440][ T17] usb usb4-port1: attempt power cycle 09:04:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x6364, 0x2) 09:04:54 executing program 1 (fault-call:0 fault-nth:7): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540a, 0x2) 09:04:54 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) sendto$netrom(r4, &(0x7f00000000c0)="56903ef8630fa8632a06ef9d2d48791e463082a500f84c542cdfb2f923295e2436155c1e945c041f7faf48af307815561e539ddd8ecf9a3c67e08a369565f3aa91bdf2811aa3546b09b8e350a1517f6747cb4df2c6adbb43731c3c6824b8532b944707bbe643dd1741fb1d0a37a09883f39119363b96ed3225a56758d805e82656755f43cd9bf0e612366b5eb4db9c7dd039f9d26b89821cc69a1022c02f4aae0179eac2eb58", 0xa6, 0x4048085, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x20) close(r1) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x0, 0x0) [ 1075.491437][ T3842] usb 6-1: USB disconnect, device number 73 [ 1075.526978][ T8421] FAULT_INJECTION: forcing a failure. [ 1075.526978][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.541913][ T8421] CPU: 0 PID: 8421 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1075.550501][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.560548][ T8421] Call Trace: [ 1075.563835][ T8421] dump_stack+0x1f0/0x31e [ 1075.568167][ T8421] should_fail+0x38a/0x4e0 [ 1075.572582][ T8421] ? tty_open+0xbf/0xca0 [ 1075.576821][ T8421] should_failslab+0x5/0x20 [ 1075.581321][ T8421] kmem_cache_alloc_trace+0x57/0x300 [ 1075.586608][ T8421] tty_open+0xbf/0xca0 [ 1075.590676][ T8421] ? do_raw_spin_unlock+0x134/0x8d0 [ 1075.595872][ T8421] chrdev_open+0x498/0x580 [ 1075.600292][ T8421] ? cd_forget+0x160/0x160 [ 1075.604713][ T8421] do_dentry_open+0x813/0x1070 [ 1075.609478][ T8421] path_openat+0x278d/0x37f0 [ 1075.614078][ T8421] do_filp_open+0x191/0x3a0 [ 1075.618590][ T8421] ? _raw_spin_unlock+0x24/0x40 [ 1075.623433][ T8421] ? __alloc_fd+0x55c/0x600 [ 1075.627938][ T8421] do_sys_openat2+0x463/0x770 [ 1075.632616][ T8421] __x64_sys_openat+0x1c8/0x1f0 [ 1075.637467][ T8421] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.643522][ T8421] do_syscall_64+0x73/0xe0 [ 1075.647914][ T8421] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.653792][ T8421] RIP: 0033:0x45cb19 [ 1075.657669][ T8421] Code: Bad RIP value. [ 1075.661723][ T8421] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1075.670129][ T8421] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1075.678097][ T8421] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c 09:04:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x2, 0x2) 09:04:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x8912, 0x2) [ 1075.686070][ T8421] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1075.694038][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1075.702008][ T8421] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 09:04:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x51, 0x8000038, r3, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000040)="929f08a8d3c6a8b3f5574da846b5ec42c57884a358f6af00d4c9348aebb09d991276310a291a473b237826e398b389f989102d3b03ab48c704c35dd4491298ef5f448f3774dfc2916da526b44131f45f190a0712e0728a83951d49397ae915d355690978309818cff434127890f3b3a78e63f50b4819f66968c4faf427bc5f", 0x7f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) 09:04:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@mcast1, 0x0, 0x2, 0xff}, 0x20) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) 09:04:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x10, 0x2) 09:04:54 executing program 1 (fault-call:0 fault-nth:8): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) [ 1075.863645][ T8453] FAULT_INJECTION: forcing a failure. [ 1075.863645][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.877163][ T8453] CPU: 0 PID: 8453 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1075.885868][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.895922][ T8453] Call Trace: [ 1075.899191][ T8453] dump_stack+0x1f0/0x31e [ 1075.903502][ T8453] should_fail+0x38a/0x4e0 [ 1075.907899][ T8453] ? alloc_tty_struct+0x65/0x780 [ 1075.912810][ T8453] should_failslab+0x5/0x20 [ 1075.917288][ T8453] kmem_cache_alloc_trace+0x57/0x300 [ 1075.922567][ T8453] alloc_tty_struct+0x65/0x780 [ 1075.927304][ T8453] ? tty_open+0x338/0xca0 [ 1075.931604][ T8453] ? trace_kmalloc+0xb9/0x120 [ 1075.936257][ T8453] ? tty_open+0xbf/0xca0 [ 1075.940471][ T8453] tty_init_dev+0x56/0x4c0 [ 1075.944861][ T8453] tty_open+0x7cd/0xca0 [ 1075.949016][ T8453] chrdev_open+0x498/0x580 [ 1075.953424][ T8453] ? cd_forget+0x160/0x160 [ 1075.957822][ T8453] do_dentry_open+0x813/0x1070 [ 1075.962564][ T8453] path_openat+0x278d/0x37f0 [ 1075.967142][ T8453] do_filp_open+0x191/0x3a0 [ 1075.971639][ T8453] ? _raw_spin_unlock+0x24/0x40 [ 1075.976480][ T8453] ? __alloc_fd+0x55c/0x600 [ 1075.980961][ T8453] do_sys_openat2+0x463/0x770 [ 1075.985616][ T8453] __x64_sys_openat+0x1c8/0x1f0 [ 1075.990446][ T8453] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.996489][ T8453] do_syscall_64+0x73/0xe0 [ 1076.000891][ T8453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1076.006757][ T8453] RIP: 0033:0x45cb19 [ 1076.010622][ T8453] Code: Bad RIP value. [ 1076.014659][ T8453] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1076.023039][ T8453] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1076.030990][ T8453] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1076.039071][ T8453] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1076.047016][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1076.055012][ T8453] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1076.151390][ T17] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1076.241497][ T17] usb 4-1: Invalid ep0 maxpacket: 0 [ 1076.261245][ T3842] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1076.403265][ T17] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1076.514076][ T17] usb 4-1: Invalid ep0 maxpacket: 0 [ 1076.519873][ T17] usb usb4-port1: unable to enumerate USB device [ 1076.641342][ T3842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.652303][ T3842] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1076.661415][ T3842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.672714][ T3842] usb 6-1: config 0 descriptor?? [ 1076.712056][ T3842] usbhid 6-1:0.0: can't add hid device: -22 [ 1076.718159][ T3842] usbhid: probe of 6-1:0.0 failed with error -22 09:04:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x8933, 0x2) 09:04:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x4c00, 0x2) 09:04:57 executing program 1 (fault-call:0 fault-nth:9): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x420080, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x9, 0x4, 0x2, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x6}, 0x8) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) write$dsp(r5, &(0x7f0000000040)="38364fe7bd34538fe41db0d049bf1b02b9f8cde885770f521e8dec87cb4f2fdc0a1539875f138290fbb2973932863d06d343c28b8719", 0x36) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) [ 1078.535794][T18965] usb 6-1: USB disconnect, device number 74 [ 1078.597278][ T8480] FAULT_INJECTION: forcing a failure. [ 1078.597278][ T8480] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.629336][ T8480] CPU: 0 PID: 8480 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1078.637933][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.648428][ T8480] Call Trace: [ 1078.651719][ T8480] dump_stack+0x1f0/0x31e [ 1078.656053][ T8480] should_fail+0x38a/0x4e0 [ 1078.660470][ T8480] should_failslab+0x5/0x20 [ 1078.664969][ T8480] kmem_cache_alloc_node+0x64/0x290 [ 1078.670149][ T8480] ? alloc_vmap_area+0x125/0x1c90 [ 1078.675149][ T8480] alloc_vmap_area+0x125/0x1c90 [ 1078.679974][ T8480] ? trace_kmalloc_node+0xc5/0x130 [ 1078.685059][ T8480] ? kmem_cache_alloc_node_trace+0x28a/0x2b0 [ 1078.691017][ T8480] ? __get_vm_area_node+0x1ac/0x380 [ 1078.696199][ T8480] __get_vm_area_node+0x207/0x380 [ 1078.701210][ T8480] __vmalloc_node_range+0xe8/0x870 [ 1078.706303][ T8480] ? n_tty_open+0x19/0x150 [ 1078.710701][ T8480] ? lock_acquire+0x160/0x720 [ 1078.715352][ T8480] ? tty_ldisc_lock+0x6a/0xb0 [ 1078.720003][ T8480] ? n_tty_open+0x19/0x150 [ 1078.724403][ T8480] vzalloc+0x75/0x80 [ 1078.728291][ T8480] ? n_tty_open+0x19/0x150 [ 1078.732688][ T8480] n_tty_open+0x19/0x150 [ 1078.736906][ T8480] tty_ldisc_setup+0xda/0x280 [ 1078.741567][ T8480] tty_init_dev+0x271/0x4c0 [ 1078.746062][ T8480] tty_open+0x7cd/0xca0 [ 1078.750204][ T8480] chrdev_open+0x498/0x580 [ 1078.754594][ T8480] ? cd_forget+0x160/0x160 [ 1078.758985][ T8480] do_dentry_open+0x813/0x1070 [ 1078.763731][ T8480] path_openat+0x278d/0x37f0 [ 1078.768312][ T8480] do_filp_open+0x191/0x3a0 [ 1078.772803][ T8480] ? _raw_spin_unlock+0x24/0x40 [ 1078.777623][ T8480] ? __alloc_fd+0x55c/0x600 [ 1078.782111][ T8480] do_sys_openat2+0x463/0x770 [ 1078.786794][ T8480] __x64_sys_openat+0x1c8/0x1f0 [ 1078.791621][ T8480] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1078.797658][ T8480] do_syscall_64+0x73/0xe0 [ 1078.802153][ T8480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1078.808036][ T8480] RIP: 0033:0x45cb19 [ 1078.811906][ T8480] Code: Bad RIP value. [ 1078.815943][ T8480] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1078.824327][ T8480] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1078.832285][ T8480] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1078.840247][ T8480] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1078.848197][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1078.856171][ T8480] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1078.882180][ T8480] syz-executor.1: vmalloc: allocation failure: 9120 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1078.911804][ T8480] CPU: 1 PID: 8480 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1078.920408][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.930459][ T8480] Call Trace: [ 1078.933759][ T8480] dump_stack+0x1f0/0x31e [ 1078.938079][ T8480] warn_alloc+0x17d/0x2c0 [ 1078.942385][ T8480] ? __get_vm_area_node+0x21c/0x380 [ 1078.947563][ T8480] ? trace_hardirqs_on+0x30/0x80 [ 1078.952573][ T8480] __vmalloc_node_range+0x29a/0x870 [ 1078.957742][ T8480] ? lock_acquire+0x160/0x720 [ 1078.962386][ T8480] ? tty_ldisc_lock+0x6a/0xb0 [ 1078.967035][ T8480] ? n_tty_open+0x19/0x150 [ 1078.971426][ T8480] vzalloc+0x75/0x80 [ 1078.975297][ T8480] ? n_tty_open+0x19/0x150 [ 1078.979694][ T8480] n_tty_open+0x19/0x150 [ 1078.983917][ T8480] tty_ldisc_setup+0xda/0x280 [ 1078.988711][ T8480] tty_init_dev+0x271/0x4c0 [ 1078.993309][ T8480] tty_open+0x7cd/0xca0 [ 1078.997443][ T8480] chrdev_open+0x498/0x580 [ 1079.001839][ T8480] ? cd_forget+0x160/0x160 [ 1079.006243][ T8480] do_dentry_open+0x813/0x1070 [ 1079.010996][ T8480] path_openat+0x278d/0x37f0 [ 1079.015568][ T8480] do_filp_open+0x191/0x3a0 [ 1079.020048][ T8480] ? _raw_spin_unlock+0x24/0x40 [ 1079.024870][ T8480] ? __alloc_fd+0x55c/0x600 [ 1079.029354][ T8480] do_sys_openat2+0x463/0x770 [ 1079.034058][ T8480] __x64_sys_openat+0x1c8/0x1f0 [ 1079.038882][ T8480] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1079.045152][ T8480] do_syscall_64+0x73/0xe0 [ 1079.049551][ T8480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1079.055421][ T8480] RIP: 0033:0x45cb19 [ 1079.059283][ T8480] Code: Bad RIP value. [ 1079.063320][ T8480] RSP: 002b:00007f13d6ab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1079.071702][ T8480] RAX: ffffffffffffffda RBX: 00000000004f9dc0 RCX: 000000000045cb19 [ 1079.079651][ T8480] RDX: 000000000002c341 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1079.087599][ T8480] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1079.095558][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1079.103517][ T8480] R13: 000000000000081f R14: 00000000004cb14c R15: 00007f13d6ab26d4 [ 1079.123721][ T8480] Mem-Info: [ 1079.126862][ T8480] active_anon:204465 inactive_anon:13602 isolated_anon:0 [ 1079.126862][ T8480] active_file:11425 inactive_file:116825 isolated_file:0 [ 1079.126862][ T8480] unevictable:0 dirty:145 writeback:0 [ 1079.126862][ T8480] slab_reclaimable:20029 slab_unreclaimable:105863 [ 1079.126862][ T8480] mapped:60226 shmem:4634 pagetables:4720 bounce:0 [ 1079.126862][ T8480] free:1035967 free_pcp:661 free_cma:0 [ 1079.164498][ T8480] Node 0 active_anon:817860kB inactive_anon:54408kB active_file:45560kB inactive_file:467300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:240904kB dirty:580kB writeback:0kB shmem:18536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 610304kB writeback_tmp:0kB all_unreclaimable? no [ 1079.192803][T18965] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1079.200387][ T8480] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no [ 1079.226121][ T8480] Node 0 DMA free:15904kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1079.257748][ T8480] lowmem_reserve[]: 0 2537 2537 2537 2537 [ 1079.263529][ T8480] Node 0 DMA32 free:365572kB min:36108kB low:45132kB high:54156kB reserved_highatomic:0KB active_anon:817860kB inactive_anon:54408kB active_file:45544kB inactive_file:467300kB unevictable:0kB writepending:580kB present:3129332kB managed:2600972kB mlocked:0kB kernel_stack:13208kB pagetables:18876kB bounce:0kB free_pcp:2636kB local_pcp:1404kB free_cma:0kB [ 1079.296584][ T8480] lowmem_reserve[]: 0 0 0 0 0 [ 1079.301319][ T8480] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:16kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1079.329625][ T8480] lowmem_reserve[]: 0 0 0 0 0 [ 1079.334572][ T8480] Node 1 Normal free:3762080kB min:53780kB low:67224kB high:80668kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1079.366656][ T8480] lowmem_reserve[]: 0 0 0 0 0 [ 1079.371396][ T8480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1079.385766][ T8480] Node 0 DMA32: 267*4kB (UE) 451*8kB (UME) 263*16kB (UME) 35*32kB (UME) 6*64kB (UME) 19*128kB (UME) 15*256kB (U) 2*512kB (U) 2*1024kB (UM) 1*2048kB (U) 84*4096kB (ME) = 365844kB [ 1079.403652][ T8480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1079.415148][ T8480] Node 1 Normal: 98*4kB (UM) 199*8kB (UME) 198*16kB (UME) 86*32kB (UM) 41*64kB (UME) 21*128kB (UME) 8*256kB (UE) 4*512kB (UE) 1*1024kB (M) 2*2048kB (ME) 913*4096kB (M) = 3762080kB [ 1079.433631][ T8480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1079.443698][ T8480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1079.453400][ T8480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1079.463832][ T8480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1079.474742][ T8480] 51000 total pagecache pages [ 1079.479409][ T8480] 0 pages in swap cache [ 1079.484490][ T8480] Swap cache stats: add 0, delete 0, find 0/0 [ 1079.490545][ T8480] Free swap = 0kB [ 1079.494965][ T8480] Total swap = 0kB [ 1079.498678][ T8480] 1965979 pages RAM [ 1079.503348][ T8480] 0 pages HighMem/MovableOnly [ 1079.508007][ T8480] 344206 pages reserved [ 1079.513038][ T8480] 0 pages cma reserved [ 1079.517107][ T8480] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1079.582169][T18965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.595233][T18965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.605944][T18965] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1079.617223][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.626564][T18965] usb 6-1: config 0 descriptor?? 09:04:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1c, &(0x7f0000000440)="95a45a01eeea24247d10e62573f9896a32db9524fcbb7bf08b2753b5") 09:04:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0xae01, 0x2) 09:04:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x51, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x12, 0x8000038, r2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x10621fc490748f87, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RLERROR(r8, &(0x7f0000000080)={0x12, 0x7, 0x2, {0x9, '/dev/kvm\x00'}}, 0x12) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r6], 0x14}, 0x1, 0x0, 0x0, 0x20885}, 0x0) 09:04:59 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x0) 09:04:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x4c01, 0x2) 09:04:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0xae41, 0x2) 09:04:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5409, 0x2) [ 1080.111770][T18965] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor [ 1080.129188][T18965] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0036/input/input60 [ 1080.224468][T18965] keytouch 0003:0926:3333.0036: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1080.315163][ T1819] usb 6-1: USB disconnect, device number 75 [ 1080.360843][ T3842] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1080.640711][ T3842] usb 4-1: device descriptor read/64, error 18 09:04:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:04:59 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c341, 0x2) 09:04:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0xae60, 0x2) 09:04:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 09:04:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000200000008000400"/22], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x28050) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000041) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x316}, 0x9c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r5, 0x10000}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) close(r6) [ 1081.030775][ T3842] usb 4-1: device descriptor read/64, error 18 [ 1081.160744][T18965] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1081.300641][ T3842] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1081.530724][T18965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.541762][T18965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.553792][T18965] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1081.562960][T18965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.570614][ T3842] usb 4-1: device descriptor read/64, error 18 [ 1081.574629][T18965] usb 6-1: config 0 descriptor?? [ 1081.970559][ T3842] usb 4-1: device descriptor read/64, error 18 [ 1082.090662][ T3842] usb usb4-port1: attempt power cycle [ 1082.110603][T18965] usbhid 6-1:0.0: can't add hid device: -71 [ 1082.116688][T18965] usbhid: probe of 6-1:0.0 failed with error -71 [ 1082.127486][T18965] usb 6-1: USB disconnect, device number 76