COLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000100), 0xff44) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x84, @rand_addr=0x64010102, 0x4e22, 0x0, 'nq\x00', 0xd, 0x677, 0x52}, 0x2c) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000300)=""/234, 0xea, 0x40, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000500)=""/198, 0xc6}], 0x3}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x2c}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 21:45:15 executing program 4: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c0000000000000000000000000000000000000080000300"}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000080)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x80, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000040)) 21:45:15 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2000) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="2639cdd5500006b4aaaaaaaaaaaa00000000000086dd6000000000181140fe88000000000000000000b86fae1b3336bbb6f7b21dfdae0000000001ff02000000000000000000000000000100040e"], 0x0) 21:45:15 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224e201010000000904000012070103000905010200ffe00000090582067d"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xffffffff, 0x4) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x0, @dev={[], 0x15}}) write$9p(r2, &(0x7f0000001400)=';', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 418.216844][ T12] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 418.262645][ T12] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input16 [ 418.271174][T15221] IPVS: ftp: loaded support on port[0] = 21 [ 418.325428][ T12] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 418.447774][ T8173] usb 3-1: new high-speed USB device number 20 using dummy_hcd 21:45:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "ec370275"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) read$hidraw(r1, &(0x7f0000000000)=""/31, 0x1f) prctl$PR_GET_FP_MODE(0x2e) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = gettid() tkill(r4, 0x40) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r6 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32], 0x3c, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='fuse\x00', 0x4028, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030302c757365725f132a3753d5c6afd769643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000000000,allow_other,default_permissions,allow_other,permit_directio,defcontext=user_u,obj_user=0000:00:10.0\x00,func=CREDS_CHECK,permit_directio,fowner>', @ANYRESDEC=r6, @ANYBLOB=',obj_role=netdevsim\x00,\x00']) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x3d, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f00000001c0)={0x10c, 0x31, 0x400, 0x70bd26, 0x25dfdbfc, "", [@generic="816770d1c0749a057e5ba7d62097509b3c806e25d5446ba9089852df3636b617f4e5e6bb4532bf2b0e215a03b68995d51bdbf9326d2fdb874f3a0d14bd73e8dcb423d4adbdeccfeff1fc793b831230ec5b79712f36feb75d299b472970dff237a4a073c02caa12920213dbfd01e794ae64fe5c4f5a56789233a5f92d59e2e28a30b4606ff6f058cd84dc15aba7c07442d87fb8f25f30d4a966f3d8fe990f3a4be1c2ae7c4eb81a6cc39c58fc4bd0654c118124ed0eeee470d5b16eb73e7476a3915bed28c561bb038e2434d80bc03366f9574226f8800112ed48705401919b1eb9394a32b3ba21b5dc1a43e8397dad0fae567b", @typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}]}, 0x10c}, {&(0x7f0000000340)={0xf8, 0x2c, 0x2, 0x70bd26, 0x25dfdbfd, "", [@generic="f61a66032a571f4df02e7ea69596d4fd408b684d84127017aa2426f4e491076f5a29d6716d84952823089eb318164b1e8b1c99128298c62d137b4f0d49fa63ac109e733dcbb897cbd8562a76a8e82f0c3295e13686c28d5e4f27406a4d6baf0647cb2ea7e8e5e2d0c29ab8d6f685268c7a84203ddc88940ac86b4248497e776b4b3a42f451ba523c7c05a1153c", @generic="4a237aa48bc3aa58952f5fa6e1efc86418c3c8a8a139cd9d7d4279eac5e227017b8fecf4ecab63654e9ea848fedc491b47cb640fad0d3b38008751a5f7b1352d0d956124da3599e465235b140a11", @typed={0xc, 0x69, 0x0, 0x0, @u64=0x9}]}, 0xf8}, {&(0x7f0000000100)={0x1c, 0x2e, 0x10, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}]}, 0x1c}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}], 0x38, 0x20040080}, 0x40001) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000300)="89") 21:45:16 executing program 1: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xb03}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x1) io_submit(0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="f5d1"], &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x3, 0x0, 0x9, 0x1, 0x7}, &(0x7f00000001c0)=0x98) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0xfffffffa, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x20000003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000200)=0x8) 21:45:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_dev$vcsu(0x0, 0x100000007, 0x202100) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x6, {0x0, 0x6, 0x1dde, 0x5}, {0xfd, 0x0, 0x8, 0x101}, {0x9, 0x8}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r4 = dup(r3) r5 = dup(r4) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x0, 0x882200}) [ 418.564448][ T3088] usb 1-1: USB disconnect, device number 16 [ 418.736986][ T8173] usb 3-1: Using ep0 maxpacket: 8 21:45:16 executing program 1: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@tipc=@name={0x10, 0x2, 0x0, {{0x41}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0xf49}, {&(0x7f0000000840)='\x00', 0xfd14}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@loopback, @dev={0xac, 0x14, 0x14, 0xe}, r4}, 0xc) 21:45:16 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000002180), 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x3, 0x80, 0x0, 0x20, 0x0, 0x3ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x8001, 0x20}, 0x0, 0x8, 0x5e, 0x7, 0x200000000, 0x7ffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) unshare(0x980) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100), 0x4) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="f5efe0abfcb37ca0d6fa6224cda1a4cb21cc8374e650c33dea15f201b460c8aa3ff1c43e42314921ff8e1124eb0b5faffa342d70ca770c013141d07c023d1b92eed7b000199fd81b2bb095bf7cdade532071ebbfc1bd59ef8655c5a2fac9cdc2aa0b3f79abcb21f9a9d95869f31f200bf2") ptrace$cont(0x1f, 0x0, 0x200000000000000, 0x3) r3 = gettid() ptrace$getenv(0x4201, r3, 0x3f, &(0x7f00000000c0)) bind$packet(r0, 0x0, 0x0) 21:45:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x748a, 0x3d712ea3}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x9}) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd30500"}}], 0x1c) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000100), 0xff44) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x84, @rand_addr=0x64010102, 0x4e22, 0x0, 'nq\x00', 0xd, 0x677, 0x52}, 0x2c) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000300)=""/234, 0xea, 0x40, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000500)=""/198, 0xc6}], 0x3}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x2c}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') [ 418.905806][ T8173] usb 3-1: config index 0 descriptor too short (expected 57892, got 36) [ 418.914193][ T8173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 418.988448][ T8173] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 21:45:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={r5}) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x5}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x1) sendto$inet6(r0, &(0x7f0000000080)='~', 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) [ 419.028952][ T8173] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 125 [ 419.046543][ T8173] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 419.076808][ T3088] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 419.088041][T15307] IPVS: ftp: loaded support on port[0] = 21 [ 419.156582][ T8173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 419.179388][ T8173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 419.210256][ T8173] usb 3-1: SerialNumber: syz 21:45:17 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0585605, &(0x7f0000000340)={0x0, 0x1, "f7c603c348b74fb59ae66061070000007489ba489432f10e094616daff92c0af"}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0x3, @capture={0x1000, 0x1, {0x1, 0x2}, 0x1, 0x1ff}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000001c0)={0x0, {0xfffffff7, 0x4a}}) [ 419.245999][T15220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 419.270478][T15220] raw-gadget gadget: fail, usb_ep_enable returned -22 21:45:17 executing program 1: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 419.306309][ T8173] hub 3-1:1.0: bad descriptor, ignoring hub [ 419.312285][ T8173] hub: probe of 3-1:1.0 failed with error -5 21:45:17 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x7f}, 0xc000, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x4, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/119) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000140)={0x100000000}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) 21:45:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fd}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffffffffffeea, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000fdffffff00000000e7ffffffffff25041f7bfb002bd84dba7e2b6c12abef1e54bf09f5832e057e35d353e570864188d909c3cbae8ee9740750be13fcbfb5b45655f3e00577adea715f0c7838f1d2066e5c25adf8a765b2128777e8fe8ff78a28783e3ebbb2a04d69ef995ddb2c42e5df307f41b9517c59285d0f78eb0bcaec7710b337", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX, @ANYRES16], 0x2c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x3f, @loopback, 0x4}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 419.444351][T15296] IPVS: ftp: loaded support on port[0] = 21 [ 419.456514][ T3088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.502331][ T3088] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 419.512164][ T3088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.521845][ T3088] usb 1-1: config 0 descriptor?? [ 419.549747][T15220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 419.567466][T15220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 419.827433][ T8173] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 420.026797][ T3088] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 420.045284][ T3088] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input17 [ 420.100961][ T3088] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 420.429129][ T8194] usb 1-1: USB disconnect, device number 17 [ 420.695554][T15374] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 420.975531][T15374] usb 3-1: Using ep0 maxpacket: 8 [ 421.116723][T15382] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 421.123654][T15382] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 421.205415][ C1] usblp0: nonzero read bulk status received: -71 21:45:20 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a4400001ce0b010902430001010010000904000000020e0000052406"], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) fcntl$getown(r1, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x1ff, 0x9, 0x4, 0x56, &(0x7f0000000000)=""/86, 0x1000, &(0x7f00000006c0)=""/4096, 0x77, &(0x7f0000000080)=""/119}) 21:45:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 21:45:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000000000100000000005000400000000000900020073797a30000000000500050002000000050001000600000011000300686173683a69702c6d61726b000000000c0007800800134000000000"], 0x58}}, 0x0) 21:45:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)=""/217, &(0x7f0000000140)=0xd9) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285629, &(0x7f0000000240)={0x3, @win={{0x3}, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0}}) 21:45:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) pwritev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f00000000c0)="b7a09967d3ca7b275746a79e9be3fa151d396e4b3550f0f139bd4176dc7b49", 0x1f}, {&(0x7f0000001780)="6248bea75fa19c12edd47c19c43c83de42235500df2f7014cfb78adc1ff7283c209578d2d463df7f080c10aac9687d84530df0c3ccf3cfedb39cd005a357d06d0314b356c873013a47c04a2ba15f26671c34c3838418fcf4cbe99ae997d4869ef361548f0aed32b57b54518b116b6865cbb213497b63f66316800ffe55c28837d1f152a5848b29254370c27ee24d89a4e237543b6e5d3cd037564d0596795eb4dd750137", 0xa4}, {&(0x7f0000000200)="3942d602c2965e3c500d516d37cd710cbd8171e158e65cdbc36511ea762a057ecbdf50948be884c47f01dca1cf2794cbab3faefb075cd3889f46126374d2209b14e41ffd8762655a135c2c5994569b2157", 0x51}, {&(0x7f0000001840)="7fb915a673d4edc7b116f12ff9312f71a1d6aa2eaaac477c82607c3d393e4f1e172b0c08dc8e64561da06fd7e11096da392efaa04989a6f4770a9aa1f461e383b2", 0x41}, {&(0x7f00000018c0)="71c5c57a45ff062ccceb1aaba7571b17d7e2387ac4ffe8a297ace26a1969e0fb81f052db062d77cd9503d8580a7a3f810cc5ac164c0ddeadb6f7449a25c48a1e525e8d192389", 0x46}, {&(0x7f0000001940)="bea27e3d3a9b60bb57bc012bb4d3b5ebf46453bcc32e9f2fa155b865547ffcfd454753563e1885aac26f7b4ebf92d4373292a0c29adaaf1727c0b007b0a8c8b5b78e40dbcda4f16f6ff795c102769464bad7f59791ca1c93e68572c199f9cd8d73571d6b9c6aa39b945487fa35b5c3b67c18600f4f0839c6", 0x78}, {&(0x7f00000019c0)="ab8c2c38ff1a5cbbec3c06c79d984e6d0135a19d1be7c3d473fb077aa10c82694ec7a6679bfbb1fbe42a0b7afda96bce75e051f2ef1bdd45ad58e69b39b15d716f9e62e04892fcc77dc834d1b5bcfa166a3638c36d42c895f5099dc07920a0dfd9669cfa906c28fc2e56ecbe3ea44652bb359d8c9d4c8db47701a27ca1a13e7eeab0ec5db6c208ee638d410e715f4f51e51659648e148fa722950b0964cf0b12ca9fb60dfdab3f90f51cea96bb6365d93c7d5073c8e6df31ea2ac4b7780b17ff853bf147508c831db12d03407bc93b092c6ba70cde35c78c969d56dcc360c29d", 0xe0}], 0x8, 0x1000, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = open(&(0x7f0000000180)='./bus\x00', 0x1fb842, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0x0, 0x0}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r7, 0x0, 0x4, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x4040000) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000528bd70004b8d7c4a3a98080008000100020000000800000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40040) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000080)=0x401) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0185502, &(0x7f0000000000)={0x1}) [ 422.419997][ T3088] usb 3-1: USB disconnect, device number 20 [ 422.442715][ T3088] usblp0: removed 21:45:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x27, 0x800, 0xfffffffb, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x1, 'macvlan1\x00', {}, 0xffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x4000000a, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="0503d03206023e0e01a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x885}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00686689c4cf0e0112a9", @ANYRES16=0x0, @ANYBLOB="000400000000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004000000080001007063690011000200303030303a30303a31302e300000000008000b005b64c508"], 0x84}, 0x1, 0x0, 0x0, 0xc001}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 21:45:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x11}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2}, 0x0) pipe(0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/4083, 0xff3}, {&(0x7f0000000100)=""/56, 0x38}], 0x2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f00000000c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)={0x19c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9103}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xe0e}, {0x8, 0xb, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffc01}, {0x6, 0x16, 0x615c}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5}, {0x6}, {0x8, 0xb, 0xfffffffe}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_open_procfs(0xffffffffffffffff, 0x0) [ 422.551959][T15434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1055391792 (33772537344 ns) > initial count (20132040256 ns). Using initial count to start timer. [ 422.747329][T15457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.748178][T15458] IPVS: ftp: loaded support on port[0] = 21 [ 422.754772][T15457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.768164][T15457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.776073][T15457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.785008][T15457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.792491][T15457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.801588][T15457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.809320][T15457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.817651][T15457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.825820][T15457] hsr_slave_1: hsr_addr_subst_dest: Unknown node 21:45:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x3, r5}) ioctl$CHAR_RAW_REPORTZONE(r3, 0xc0101282, &(0x7f00000001c0)={0x200, 0x8, 0x0, [{0xff, 0x1000, 0x33, 0x8, 0x3, 0x5, 0x5}, {0x5, 0x3, 0x9, 0x2, 0x9, 0x3, 0x20}, {0x9, 0x2, 0xfffffffffffff000, 0xe3, 0x9, 0x96, 0x9}, {0x9, 0x101, 0x1, 0x9, 0x4, 0xfa, 0x6e}, {0x3, 0x7f, 0x7, 0x12, 0x2, 0x8, 0x7}, {0xa74, 0x2, 0x8, 0x0, 0x0, 0x6, 0x49}, {0x5, 0xcb, 0x51672a82, 0x9, 0x38, 0x0, 0x2}, {0x4, 0x1f, 0x6, 0x7e, 0xf3, 0x1, 0x7f}]}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001180)="e4", 0x1a000, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x9}, 0x7a) 21:45:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x200843, 0x0) write$P9_RSTAT(r4, &(0x7f0000000400)={0x4a, 0x7d, 0x1, {0x0, 0x43, 0x7, 0x3, {0x4, 0x400}, 0x240000, 0xee0f, 0x0, 0x20, 0x5, 'IPVS\x00', 0x5, 'IPVS\x00', 0x5, 'IPVS\x00', 0x1, '['}}, 0x4a) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="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"], 0xa8}}, 0x200080c0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x7c}}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="1eaf4f7dd02a"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) [ 423.425715][ T3088] usb 3-1: new high-speed USB device number 21 using dummy_hcd 21:45:21 executing program 0: close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="6388f65de1ee8d46a76b4de906e3fc5c", 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f3231ad6587fa8500cbc48e00532e1184b78ea1c5e41d04ac93f87654490b228c74d2979f0f587c6ca685b24ca2a636177bb954dac8d3aa4c1e5aa0a9b6b6170303822c54ca217216684763c7a7d2c3e2e7ed161c1858c5e1c8fbe34f60b1888c5fc75c000000009d570efdcf504e8a6bb3aba92cdf915e716545834a8da4a8be87fa70913cc1faaab7f63302f0dea4511386cda3f7fe5a7cca3f67dd29119ad52122cbaefd369c5fd48512915c148ebfb0d3eaf3161b3e184fdc03eb907ebf07f3a4d500"/208], 0x5) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x200}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000000000/0x13000)=nil, 0x4000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000339000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) shmat(r7, &(0x7f0000292000/0x4000)=nil, 0x4000) 21:45:21 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000200e0"], 0x48}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080)={0x0, 0xea60}, 0x10) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2650, 0x111801) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) [ 423.821583][T15511] IPVS: ftp: loaded support on port[0] = 21 [ 423.859931][ T3088] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.056109][ T3088] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.065165][ T3088] usb 3-1: New USB device strings: Mfr=1, Product=206, SerialNumber=11 [ 424.091909][ T3088] usb 3-1: Product: syz [ 424.107896][ T3088] usb 3-1: Manufacturer: syz [ 424.119425][ T3088] usb 3-1: SerialNumber: syz [ 424.172143][ T3088] cdc_mbim 3-1:1.0: bind() failure 21:45:23 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a4400001ce0b010902430001010010000904000000020e0000052406"], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) fcntl$getown(r1, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x1ff, 0x9, 0x4, 0x56, &(0x7f0000000000)=""/86, 0x1000, &(0x7f00000006c0)=""/4096, 0x77, &(0x7f0000000080)=""/119}) 21:45:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x8ddc02f9cf2aa423, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth1_vlan\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 21:45:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x11}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2}, 0x0) pipe(0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/4083, 0xff3}, {&(0x7f0000000100)=""/56, 0x38}], 0x2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f00000000c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)={0x19c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9103}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xe0e}, {0x8, 0xb, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffc01}, {0x6, 0x16, 0x615c}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5}, {0x6}, {0x8, 0xb, 0xfffffffe}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_open_procfs(0xffffffffffffffff, 0x0) 21:45:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=@in={0x2, 0x4e24, @remote}, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="18d87dafc84a28e67a9c1843fc126bd92112cf5ae3887c3996294441b567a244a7b0d2368d64bccaf956bd4d0f68e120961400ec5927010296224a428f737993664055e171f44a0d558924fcd4dc6514fc6c563c854b7e490e1d26d5086a118149764ac4b3af38106ad1ea893b8b599539e18938a1d9f3b5a5deed6eef03360e30df1eaf9f9103c615db44a8726564d9e0254ab46f90997c463a945924a1c699ba8c75f0a574adbe7a7df63258d82b553e0435057b9ca4ae1fcb0357c077366de961d4be102340b93d4dba1e3721"}, {&(0x7f0000000280)="c6d8b835f7b3f7ebc4f206c687cee9c7b9535a6ebbb442e24f23d964df47484c3535bcdee9bf51b521c97dada6cd9f2c5841b3e5776fe3ecbc1922cd12be199512db4182c5fd26fb5af36060070498e1a3b39186337ebb8b3b2d212d9818e723b48c82d5b678a5edec5fe5009991f04f686decb7a887f96720a1fa9f2900e770ba20eaf6d58e154db36dbb26c28cb19928b59ba6e042249bca984972113b227c48c8f8c45e2e99411d82c1c4a68e409440a6a814b9e4fde1c11fd5390cfa589c540478d11206d3b10926af12419f72b3b3694309"}]}], 0x61, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x76, &(0x7f0000000040)={r4}, 0x8) 21:45:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x200843, 0x0) write$P9_RSTAT(r4, &(0x7f0000000400)={0x4a, 0x7d, 0x1, {0x0, 0x43, 0x7, 0x3, {0x4, 0x400}, 0x240000, 0xee0f, 0x0, 0x20, 0x5, 'IPVS\x00', 0x5, 'IPVS\x00', 0x5, 'IPVS\x00', 0x1, '['}}, 0x4a) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="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"], 0xa8}}, 0x200080c0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x7c}}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="1eaf4f7dd02a"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 21:45:23 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12080000000000000005a8a40700000000010902240001010000000904000012070103000905810200ffe00000010000001a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) [ 425.480399][ T8194] usb 3-1: USB disconnect, device number 21 [ 425.556648][T15569] IPVS: ftp: loaded support on port[0] = 21 21:45:23 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000240)=""/121, 0x79}, {&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000400)=""/104, 0x68}], 0x4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r3, 0x0, &(0x7f00000001c0)={'L+', 0x3}, 0x16, 0x1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x9, 0x4, 0x1, 0x0, "44e39dab04e9e86df08ca352d166da27e72ec52d899e30b7f1a9ed3cc44c5ecd"}) 21:45:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xa7, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0x400dd, 0x0, @sync=&(0x7f0000000080)={0x1, 0x4, 0x200}}}) 21:45:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0xf339, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0xffffffff, 0xf, 0x8, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0x1fe]}}, {@mac=@random="8170f29bf927", {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff, 0x2478, 0x81, 0x1, 0x0, 0x4, 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x130}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x6, 0x0, 0x1, 0x0, "bfa6f946fadd5bb8902155aeb2318327dc886bd040f9bd33152fcf09a8a49fd87fc0c6f4b29f6421b31d61310c0da72491c856de2484227a76e596e145a5ac61"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x10001}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfffffecc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r5, 0x0, r1, 0x0, 0xffffffffffff8001, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) close(r2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x80, 0x0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 425.805299][ T3088] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 425.935727][ T8194] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 426.095245][ T3088] usb 2-1: device descriptor read/64, error 18 21:45:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [{{0x254, 0x1, {{0xd81cc3107975331a, 0x5}, 0x0, 0x7, 0x2, 0xb65, 0x18, 'syz1\x00', "2b775bc1035bd8c646cf79cee3c727caddde18bd0a053472170783a04c6f3da9", "9ad0d5d14bab68115ca5bada61ea0518a87233b91fe03a870f5606b5460ffb6b", [{0x1000, 0xb0, {0x3, 0x310}}, {0x0, 0x9, {0x2, 0x4}}, {0x3, 0x400, {0x3, 0x5}}, {0x1, 0x100, {0x0, 0x9a2c}}, {0x40, 0x0, {0x1, 0x4dae}}, {0x5, 0x8, {0x2, 0x7}}, {0x2, 0xb41, {0x1, 0x80}}, {0x1, 0x6, {0x3, 0x323e}}, {0x7, 0x3ff, {0x2, 0x8}}, {0x6, 0x9, {0x0, 0x4a6f}}, {0x24f0, 0x8, {0x3, 0x4}}, {0x9, 0x8, {0x3, 0x7f}}, {0x8, 0xb73, {0x2, 0xe2a}}, {0x9, 0x20, {0x1, 0x4}}, {0x5, 0x800, {0x3, 0x2}}, {0x3, 0x3f, {0x3, 0x8}}, {0x160, 0x3, {0x2, 0x3d3}}, {0x3f, 0x1f, {0x3, 0x9}}, {0x5, 0x5, {0x1, 0x100}}, {0x4, 0x6, {0x0, 0x3}}, {0x0, 0x3f, {0x3, 0x8000}}, {0xff, 0x101, {0x2}}, {0x9, 0x1f, {0x3, 0x2}}, {0x800, 0x2, {0x3, 0x40}}, {0x9, 0xfff7, {0x2, 0x7fffffff}}, {0x7, 0x8001, {0x0, 0x4}}, {0x4, 0x5, {0x1, 0x200}}, {0x3, 0x4, {0x2, 0x3}}, {0x3, 0x7, {0x2, 0x5}}, {0xf, 0xe90, {0x2, 0x5}}, {0x5, 0x3f, {0x3, 0x5}}, {0x20, 0x4, {0x3, 0x40}}, {0x4c, 0x7, {0x1, 0x9}}, {0x7fff, 0xa908, {0x3, 0x3}}, {0x7f, 0x3587, {0x1, 0x1ff}}, {0x1, 0x1, {0x3, 0x7ff}}, {0xfff7, 0x0, {0x3, 0x2}}, {0x60, 0x4, {0x3, 0x4}}, {0x800, 0x1, {0x0, 0x3}}, {0x3, 0x800, {0x0, 0x7ff}}]}}}, {{0x254, 0x1, {{0x0, 0x138f}, 0x8, 0x80, 0x7, 0x401, 0x15, 'syz0\x00', "525e1191127b1832d1420be4a4b27acacdb29ffdcdbb4052aeeb49385dd2ca43", "c17c0c0ef4aef7c1e29d4b562a0c9918a2ba290dd10db6ebe0308fe74387a226", [{0x1, 0x6, {0x1}}, {0x9, 0x800, {0x0, 0x1}}, {0x5, 0xfffa, {0x3}}, {0x5, 0xfff7, {0x3, 0x5}}, {0x1, 0x2, {0x1, 0x495f}}, {0x2, 0x4, {0x0, 0x7}}, {0x0, 0x456, {0x1, 0x7}}, {0x1, 0x100, {0x2, 0x9}}, {0xef, 0x7, {0x0, 0x401}}, {0x4, 0x4, {0x0, 0x7}}, {0x6fd7, 0x2, {0x3, 0x1e}}, {0x6, 0x4, {0x3, 0x10000}}, {0x3, 0xd3, {0x2, 0x7}}, {0x40, 0x80, {0x3, 0xfea4}}, {0x1, 0x6, {0x1, 0x6}}, {0x67b6, 0x7, {0x1, 0x5}}, {0x6, 0x3, {0x1, 0x1}}, {0x5d8e, 0x5, {0x3, 0x9}}, {0x5, 0xee9b, {0x0, 0x1}}, {0x3ff, 0x6, {0x1, 0x80000001}}, {0x101, 0x1a2a, {0x0, 0x5}}, {0x1, 0x400, {0x1, 0x9}}, {0x4, 0x5, {0x2, 0x7ff}}, {0x1ff, 0x9, {0x1, 0x9}}, {0x0, 0x9, {0x1, 0x3f}}, {0x8, 0x5, {0x1}}, {0x9, 0x5, {0x0, 0xc22}}, {0x0, 0x9, {0x3, 0x7f}}, {0xb1e, 0x113e, {0x1, 0xffffffff}}, {0x9f9a, 0x401, {0x1, 0x3f}}, {0x7c1, 0x4, {0x0, 0x5}}, {0x3ff, 0x101, {0x2, 0xfffffffc}}, {0x96, 0x2, {0x3, 0x200}}, {0x7, 0x0, {0x1, 0x7f}}, {0x3, 0x0, {0x1, 0xffffffff}}, {0x9, 0x2, {0x3, 0x8001}}, {0x5, 0x7, {0x1, 0x7ff}}, {0x8cde, 0x100, {0x3, 0x8b5f}}, {0x5, 0x8001, {0x3, 0x4ca}}, {0x3ff, 0x5, {0x2, 0x7ff}}]}}}, {{0x254, 0x1, {{0x2, 0x800}, 0x4, 0xfb, 0x8001, 0x3ff, 0x3, 'syz1\x00', "ae53a81d04703bcb30de0d3e766b1e36b0aec416b239e317811b618edb16a419", "2dd247d6bfb57b2b4518cec4072d27e32cb583b215caa78c1fe54a7a2a5d6e4b", [{0x2, 0x5, {0x2, 0x8}}, {0x400, 0xbd25, {0x0, 0x2}}, {0x93, 0x6, {0x0, 0x3}}, {0x81, 0x6, {0x0, 0xfffffc01}}, {0x3dd, 0x3, {0x3, 0x8}}, {0x8, 0x4, {0x1, 0x9e}}, {0x61, 0xc37, {0x1, 0x1}}, {0x0, 0x883, {0x1, 0xff}}, {0x0, 0x7, {0x3, 0x9}}, {0x7, 0x1, {0x3, 0x7}}, {0x7, 0xa5, {0x3, 0xaad}}, {0x101, 0xfff, {0x1, 0x9}}, {0x2e94, 0x2, {0x1, 0xffff}}, {0x3ef, 0x5, {0x3, 0x9d}}, {0x0, 0x8, {0x3, 0x8}}, {0x401, 0x1, {0x1, 0x9}}, {0x5, 0x0, {0x1, 0x2}}, {0x8, 0x1, {0x0, 0x2}}, {0x3, 0x6, {0x1, 0x1}}, {0x1, 0x401, {0x1, 0x1}}, {0x1f, 0x4, {0x1, 0x6}}, {0x40, 0x1, {0x0, 0x1ff}}, {0x9, 0x3f, {0x1, 0x80000000}}, {0x3, 0x5, {0x0, 0x1}}, {0x7ff, 0x7, {0x1, 0xe4}}, {0x7, 0x50b, {0x0, 0x64c2}}, {0x6, 0x7, {0x0, 0x9}}, {0xfa8, 0x81, {0x3, 0x400}}, {0x3, 0x1ff, {0x2, 0x80000000}}, {0x4, 0xffff, {0x0, 0x9}}, {0x10, 0xff, {0x3, 0x10001}}, {0x0, 0x6e3, {0x1}}, {0x5, 0xfffd, {0x0, 0x1e}}, {0xa1ed, 0x62, {0x0, 0x7}}, {0xc74c, 0x9, {0x3, 0x9}}, {0x6, 0x7, {0x0, 0x8}}, {0xff80, 0x7a4e, {0x1, 0x5}}, {0x4, 0x80, {0x2, 0x6}}, {0x2cac, 0x2, {0x1, 0x9}}, {0x3f, 0x5, {0x0, 0x85}}]}}}, {{0x254, 0x1, {{0x1, 0x7ff}, 0x7f, 0x1, 0x4, 0x8fbc, 0x3, 'syz1\x00', "5cdc3ec191f11e78432e7294e493eefd56c0ab636ee260b9893d866aeb5f6b34", "9ada47a936a55e67ca239cc27c4a0de7d0346db6ce34449b33e837ca62f76768", [{0x4, 0xffff, {0x2, 0x14}}, {0x2, 0x5, {0x0, 0xffffffff}}, {0x7, 0x79c0, {0x1, 0x8a7}}, {0x400, 0x3, {0x2, 0x7}}, {0x2, 0xd4da, {0x3, 0x49}}, {0x4, 0x9, {0x3, 0x8}}, {0x0, 0x8, {0x1, 0x2}}, {0x8cff, 0x1, {0x3, 0x1f}}, {0xfff, 0x1, {0x3, 0x9}}, {0x401, 0x9226, {0x3, 0xffffff35}}, {0x0, 0x1, {0x3, 0xe51}}, {0x1, 0xfff8, {0x2, 0x3ff}}, {0x6, 0x71, {0x2, 0x69}}, {0x3f, 0x3, {0x0, 0x6}}, {0x4, 0x8, {0x1, 0xff}}, {0x6, 0xffff, {0x0, 0x6}}, {0x1, 0x0, {0x3}}, {0x3f, 0xff}, {0x1, 0x8, {0x1, 0x70b8}}, {0x6, 0x40, {0x0, 0x5626}}, {0x5226, 0x8, {0x3, 0x8}}, {0x9, 0x1, {0x1, 0x427}}, {0x8, 0xebcc, {0x2, 0x2}}, {0x9, 0x2, {0x3, 0x4}}, {0x2, 0x100, {0x3, 0x26}}, {0x2, 0x1ff, {0x0, 0x80000000}}, {0x1, 0x9, {0x0, 0x566b698}}, {0x8, 0xfb64, {0x3, 0x5}}, {0x9, 0x3, {0x3, 0x7}}, {0x0, 0x25a5, {0x3, 0x4}}, {0x9, 0xff, {0x3, 0x1}}, {0x4, 0x1000, {0x1, 0x8}}, {0x7fff, 0xff, {0x3, 0x81}}, {0x8001, 0x8, {0x1, 0x8}}, {0x401, 0x8001, {0x2, 0x3}}, {0x3, 0x3f, {0x1, 0x3}}, {0x0, 0xc23, {0x1, 0x84c}}, {0xfff7, 0xff, {0x3, 0x7}}, {0x3, 0x400, {0x1}}, {0x6, 0x4, {0x3, 0x1}}]}}}]}, 0x964}}, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x20, @mcast1, 0x3}}, 0x0, 0x0, 0x2a, 0x0, "29643013dfffa0b3d3ce7ef7c202e3725e7e0f2b6b11269b765b71d7678c689d63b4e0ad71b1c10700dd72e9f86e38b81a924c75f5f4b4057ab4e420a547c186da563cd02ad665615ac895319690df2b"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 21:45:24 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db982000", @ANYBLOB], 0x1c2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x410000, 0x0) syz_genetlink_get_family_id$ethtool(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbf8, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008801}, 0x8042) [ 426.355866][ T8194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.459849][ C0] sd 0:0:1:0: [sg0] tag#1402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 426.470321][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB: Test Unit Ready [ 426.472534][T15622] IPVS: ftp: loaded support on port[0] = 21 [ 426.476802][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476821][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476840][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476857][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476877][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476896][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476915][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476934][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476953][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476970][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.476989][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.477017][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.535259][ T3088] usb 2-1: device descriptor read/64, error 18 [ 426.540283][ C0] sd 0:0:1:0: [sg0] tag#1402 CDB[c0]: 00 00 00 00 00 00 00 00 [ 426.550339][ T8194] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.633265][ T8194] usb 3-1: New USB device strings: Mfr=1, Product=206, SerialNumber=11 [ 426.644057][ T8194] usb 3-1: Product: syz [ 426.653795][ T8194] usb 3-1: Manufacturer: syz [ 426.660912][ T8194] usb 3-1: SerialNumber: syz [ 426.675627][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:24 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="14bfd12ebf85212272d2000000b78b1d0564dc9a673ca7693ddcde7d238cc1b869ab919bbb50b8c7ff2425ee9615ddd5f45d31a91c81dd86cbe35abfdaf7b13323e9aa6f9417db5e281f6a1463c6a5d5f6679981d2e2468d4b24a6f68e7f2ef354d7edd8222664de2858f4bf788c705d4669aded2ac6f9a7dde5b0f078fb", @ANYRES16=0x0, @ANYBLOB="0001000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100008400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xa0, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8990}, 0x4000000) capget(&(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0xc0, 0x67}, {0x188, 0x8, 0x0, 0x5, 0x1ff, 0x1e, 0x7}, {0x10000, 0xfffffffffffffffa, 0x9, 0x947}, 0xe02b, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000580)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x1, @mcast2}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}, @in={0x2, 0x4e22, @loopback}], 0x84) socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 426.732854][ T8194] cdc_mbim 3-1:1.0: bind() failure [ 426.787681][T15629] team0: Port device veth9 added [ 426.895722][ T3088] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 426.927631][T15638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 427.185147][ T3088] usb 2-1: device descriptor read/64, error 18 [ 427.204583][T15666] IPVS: ftp: loaded support on port[0] = 21 [ 427.595251][ T3088] usb 2-1: device descriptor read/64, error 18 [ 427.716072][ T3088] usb usb2-port1: attempt power cycle [ 428.436191][ T3088] usb 2-1: new high-speed USB device number 12 using dummy_hcd 21:45:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="46518afb39a3d0d64cb15649d52518e28fb7a9e69d6cf0dcef786c8cea23f41376d4d3c1b3f305f50ab9967545eae5859bf506c3bf5c06f44ff57594dde648c9f47bde80515a868ce3472dff0f000000000000b734c2e32e5a13eaef61ea632d2bef35ef16e2dde2c6bbd421a267985f28f3ba063d6beff8adc4861bf596d2e111f8393fd4aeed5e88fb2d6a9a06b73258b18c8e8d8896f6382a3e1d2b73923450cfa03a34b0d56df56dd0e3c4d334", @ANYRES16, @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x576, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x22, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}}, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname(r3, 0x0, &(0x7f0000000080)) 21:45:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x121080) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='%|#^,[(\x00') connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x10020fc, 0x0}}], 0xc6, 0x0) 21:45:26 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x90102, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x800}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2, 0x100, 0x6}, 0x8) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) move_pages(r5, 0x6, &(0x7f00000001c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fe3000/0x2000)=nil, &(0x7f0000c38000/0x1000)=nil, &(0x7f0000c79000/0x3000)=nil, &(0x7f0000a6b000/0x14000)=nil], &(0x7f0000000040)=[0x1f], 0x0, 0x6) 21:45:26 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000040)={0x8, 'bond_slave_1\x00', {'bridge_slave_0\x00'}, 0x4}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 21:45:26 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x80000000}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111100000936cbb00000046000000000000009500000000040000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 428.564310][ T8173] usb 3-1: USB disconnect, device number 22 [ 428.585726][ T3088] usb 2-1: device descriptor read/8, error -71 21:45:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f239ed679280012800a00010076786c616e00000018000280140012"], 0x3}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="bad98d2926e7da0f8decc0df5713abe97054c1e57e01b9f54e617acae0f40d7dfb4551e6a73e4c64e6fafbe72a16784d5f07a7b6ca52c65b5aad338f513557a92d6d32c0aee2359ff7194bfd", 0x4c}, {&(0x7f0000000240)="7b74214158eed6b9c466a4fa6633b6d08bc977924ee4505f9e3735be03e6689d34815be9bbc69ea5a2ed301decebc13685a47d589fc6ddb89ab18ecfbc67b900b7cc98225bdd88bf42d65606e40717f5f604381de64263f6cf174d315e513e97d5beaefe7ee35f1e0a21b2225e48a395470a1f7ad2b25b290878dac1add380f1edd051ea748378fe2d3785cd1d9d0c82346f15591415e982624ea289369584aa1a34788119d96f39fa7ffb77c185d0d09f6cf28279627488845259a77358e3f41db5df1f6851cb15e4e4602babc93bbf96e45d27a385a6", 0xd7}], 0x2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) getdents(r6, &(0x7f0000000340)=""/95, 0x5f) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000003c0)=""/91) 21:45:26 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x24180, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @mcast1, 0x1}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xc2, 0x1000, &(0x7f0000000140)="c3e9e47d5274898e382d56d059f47612eff5a22a62feb2d945914448589772f608bcb87d166f1e16440e68aff5e84f35f8f4b3fc645125e2d679cd6c6c2df415eeca04a68b3a7db1ed8c4bede5f08547351feb46bc7841c3c327d790e06cf41eab9134b79512a43735212bd53b0faa34aac168b8aca7c64f1c801c429795293bc2033b40af2b61d6a3baa9c6fa134ced77c523df59257ba20983541d1c92c24744b566adb089f7084204d32bceadfb3a6a4223101dac8ee61c8039bfa724e034170c", &(0x7f0000001540)=""/4096, 0x800, 0x0, 0x66, 0xd5, &(0x7f00000003c0)="08021e7e1046235f4c7032dd8265da72880f97055fed624accdc42b70aec60d86e6d5fe38c70a362e4260f9a359a6a421de0e45fbc5e8b0511b1823002cc88923c9fcb3660d519d2c056e15b610acc588fa898a461fec406ddccb85a58cb6b9c6752dc589b90", &(0x7f0000000440)="a0a9c3d7eef3c2f78a14438efe266ad91d5ed6513e12b287404a4844ce06c5aed8fc849d4a8785ab2b946dfce3eea21a8d223c48f2c06fe5bd3de6fc052d2dd54218b56131cbaf51aed70c0dbbbccdbd10c380e199c8bdecd85f492a4b4d674f705890e728e0530383a4e2ef6e027f54b01ce691b1db19bc9db0b21e4fc56c72e1236d5c89c01e0066d69decb8c03a5613f8fe4c15176dd035d06a21e4f890ed12c2f9c3080dd2e94741c70b0a8bf08e5b1be1ee55c93256f979a58ea30f7a8da0bdb175f7adedb242ddf4cfd814a1b4d5727f4c8a"}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015be", 0xcf}], 0x2, 0x0, 0x0, 0xffffffe0}, 0x10}], 0x1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x24180, 0x0) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0xffff, @remote, 0x43e, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) [ 428.736630][ T27] audit: type=1804 audit(1597441526.520:47): pid=15713 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/122/file0/bus" dev="sda1" ino=15775 res=1 errno=0 21:45:26 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000300)={0x2f, 0x16, [], [@generic={0x95, 0xa8, "6bc127326feb8d2b48b2aa4bf4cfba96496f07525e9856d19c6cc89e2ae24a0e64a9f4e5f7a9ac2e3496c06208ed8f21491e9bce4f833eaa61659eaca7e42ad53966284c4f311dfc357aedb2a80c32c48c34181d800b84074c4a9dc1b35bef5aaf6d0833ebd9a992f36557b03cdd533d5ae8a33ab5e57b2c46a93cf75e3ccd082489a53dba3725cc8605f42b37fbeddcd5abcc66cd99db4f0e4edec9d342e1d552b52f159dd66dee"}, @ra={0x5, 0x2, 0x61}, @pad1]}, 0xc0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES64=r8, @ANYBLOB="0000000002b575c1bfb24c2fb13fb05d63445e1e05516efd8e43c9bb9efa01119b71150092c45424ae57f84188dbbdd03cfab385be5a212ddc6a1d28bd36d81110e23a604007489a778590efc71a66e901847e"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x5}}]}}]}, 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 428.827016][ T3088] usb 2-1: device descriptor read/8, error -71 21:45:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000ea9)=""/400, 0x190) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) [ 428.892921][ T27] audit: type=1804 audit(1597441526.650:48): pid=15715 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/122/file0/file0/bus" dev="sda1" ino=15776 res=1 errno=0 21:45:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x7fffffff}, 0x10000, 0x0, 0x0, 0x0, 0x2000be}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() r1 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140)={0x404200, 0x0, 0x11}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)=0xc9) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x34) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000013c0)=""/49}], 0x100002b5}, 0x40000001) pipe(0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000100)=""/56, 0x38}], 0x3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = gettid() sched_getattr(r3, &(0x7f0000000180)={0x38}, 0x1d, 0x0) [ 429.010408][T15728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x800, 0x1, 0x200, 0x0, 0x5, 0x3}, 0x0, 0xc8e, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x8c14b0da) fcntl$notify(r1, 0x402, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:45:27 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000040)={0x8, 'bond_slave_1\x00', {'bridge_slave_0\x00'}, 0x4}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) [ 429.256729][T15739] IPVS: ftp: loaded support on port[0] = 21 [ 429.273010][T15748] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. 21:45:27 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000040)={0x8, 'bond_slave_1\x00', {'bridge_slave_0\x00'}, 0x4}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 21:45:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0006000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050e00000000000000000000000400048009000200dd387d00000000000900010073797a3000000000080003"], 0x80}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x230001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r5, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24080880) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r3, 0x1) [ 430.058644][T15745] IPVS: ftp: loaded support on port[0] = 21 21:45:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) keyctl$reject(0x13, 0x0, 0x9d90, 0x3ff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="a900c768", @ANYRES16=0x0, @ANYBLOB="00002500700000000000130000001c0009800800020000000008000100020000000800010000000000300005801c00028008000100200000000800032ca31f1200080400000000000700010069620000080001007564700000"], 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x2, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 430.220142][ T62] tipc: TX() has been purged, node left! 21:45:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000ff2f00d70867000000000000076c5053f50f5b1cfc00000000b402e1e03d4db82353cb89c4c1ddd48fc5f71654b8bf02e57aaae487615d8a3e442d81aab683369eedf83455f71beb90fef52ea1d60ee09eaeee4622306b390e8072c5ca2757922e6777a52295e7fc32ef00"/125], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff57, &(0x7f000000cf3d)=""/195, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 21:45:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0006000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050e00000000000000000000000400048009000200dd387d00000000000900010073797a3000000000080003"], 0x80}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x230001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r5, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24080880) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r3, 0x1) 21:45:28 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = fsmount(r0, 0x1, 0xe0) connect$caif(r1, &(0x7f0000000080), 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xfffdffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x6300]}, &(0x7f0000000100)=0x54) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000001c0)) 21:45:28 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000dbb6df086a080200c5670000000109022400010000000009040200e63c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = gettid() tkill(r3, 0x40) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32], 0x3c, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='fuse\x00', 0x4028, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030302c757365725f132a3753d5c6afd769643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000000000,allow_other,default_permissions,allow_other,permit_directio,defcontext=user_u,obj_user=0000:00:10.0\x00,func=CREDS_CHECK,permit_directio,fowner>', @ANYRESDEC=r5, @ANYBLOB=',obj_role=netdevsim\x00,\x00']) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x100000) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x2, 0x40, {r3}, {r5}, 0x10001, 0x29}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}], {}, [{0x8, 0x0, r7}], {0x10, 0x5}, {0x20, 0x4}}, 0x4c, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000080)={0x90, 0x0, 0x7, {0x4, 0x2, 0x7, 0x200000000000, 0x2, 0x8c, {0x3, 0x100, 0x200, 0x9, 0x9, 0x3, 0x2, 0x7fffffff, 0x1f, 0x1, 0x1000, r6, r7, 0x1, 0x1}}}, 0x90) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 21:45:28 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x3f}, &(0x7f00000000c0)=0x8) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x10b, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x7, 0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x101, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000280), 0x19}, 0x18004, 0x9, 0x0, 0xe, 0x2, 0x3c4d, 0x5}, 0x0, 0x2, r0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r4, 0x0) tkill(r3, 0x1000000000016) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000240)=[0x7fffffff, 0x6]) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/20, 0x14) 21:45:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0xe0, 0x8, 0x0, 0x0, 0x0, 0x328, 0x238, 0x238, 0x328, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfe}, {}, {0xffffffffffffffff}}}}, {{@ipv6={@private0, @local, [], [], 'sit0\x00', 'geneve0\x00'}, 0x0, 0x1e0, 0x248, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@private0, @private1, @remote, @dev, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @private}, @loopback, @mcast1, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @empty]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x237) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000540)={0xf7b3, 0x8, 0x35, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0xa8}}, 0x200080c0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xd0, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0xffffffffffffff29, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0xd2e}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x44000) [ 430.710356][T15834] IPVS: ftp: loaded support on port[0] = 21 [ 430.753647][T15844] Cannot find add_set index 0 as target [ 430.955040][ T2547] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 431.195949][ T2547] usb 4-1: Using ep0 maxpacket: 8 [ 431.315973][ T2547] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 431.323994][ T2547] usb 4-1: config 0 has no interface number 0 [ 431.344968][ T2547] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 230, using maximum allowed: 30 [ 431.364990][ T2547] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 431.384931][ T2547] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 431.394843][ T2547] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 431.434987][ T2547] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 230 [ 431.464981][ T2547] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 431.474030][ T2547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.551777][ T2547] usb 4-1: config 0 descriptor?? [ 431.595346][T15836] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 431.602397][T15836] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 432.416965][ T2547] usb 4-1: USB disconnect, device number 20 21:45:30 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x3f}, &(0x7f00000000c0)=0x8) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x10b, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x7, 0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x101, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000280), 0x19}, 0x18004, 0x9, 0x0, 0xe, 0x2, 0x3c4d, 0x5}, 0x0, 0x2, r0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r4, 0x0) tkill(r3, 0x1000000000016) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000240)=[0x7fffffff, 0x6]) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/20, 0x14) 21:45:30 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "01fa3a4e35786f693f2a52c2e90d2681"}, 0x11, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x3, 0x9, "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", 0x1, 0x81, 0x0, 0x4, 0x8, 0x4, 0x3}, r2}}, 0x120) openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a310000000000df40e65cc7802200000000000000000000000084000000000000000000000000000000000000000000000000200000000000000000000001000000000000000000000000000000000100258d7a35000000000019dd000000000000000000000000000000feffffff000000000000fb65c06bd485fb0bf49dc200000000000000000074b6628ddfb1cc186d6300000000000000000073797a31000000000000000000000001000000000003f4ffce0a0000000000000000000009000000000000000000000000000000000000000000000061b1000000000000000000000000000000003b38e967ac8200"/280], 0x12e) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000140)={0xa, {0x8000, 0x6, 0x6, 0x9}}) 21:45:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xc62]}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x2, 0x0, [{}, {}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x3d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000080000001000000000005000000000000000033c4587476c1f09600000000001512702000000000000000000a000000000000000000b1179246"]) pipe(&(0x7f0000000000)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11401060}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000001070104000000000000000001000006284d2f18d1f109c2c1e5c3b8075ba3ab58eb9cdddaf0"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x10) mq_timedreceive(r4, &(0x7f0000000000)=""/107, 0x6b, 0x5, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000000c0)=0x30) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x403, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x48841) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000180)={0x7, 0x1, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, 0x0, 0x0) 21:45:30 executing program 3: socket$netlink(0x10, 0x3, 0x4) r0 = getpid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000a00)=0x1f, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x80, 0x6, 0x7, 0x5, 0x0, 0x382, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x9}, 0x10, 0x8, 0xbff, 0x8, 0x7fffffff, 0x4}, r0, 0x2, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x5) getpgid(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x0, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 433.065274][ T62] tipc: TX() has been purged, node left! [ 433.140060][T15930] IPVS: ftp: loaded support on port[0] = 21 21:45:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4001) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000f7ff00"/20, @ANYRES32=r4, @ANYBLOB="1400020000000000000000000200ffffac14140014000100fc0200"/40], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', r5}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x254, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xf654, 0x0, 0x5}, {0x7, 0x1f, 0x7, 0x8}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x3c, 0x6, 0x5}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000010) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:45:31 executing program 3: socket(0x9, 0x80000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) write(r0, &(0x7f0000000040)="a06afc4125fb90bdc1f22cea804299307625b8faaa7f2eaabeeab8e0ff000000", 0xf) [ 433.223067][T15941] cannot load conntrack support for proto=3 21:45:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="5cb00400", @ANYRES16, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff00000000008000000000000600000108000a0000000000060002000000000014001f0000000000000000000000ffffac1414aac333a402586383fd1a1630"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 21:45:31 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x9}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001300)=@v1={0x0, @aes128, 0x3, "8bcca0c212d9fe0d"}) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x2}, {}, @quote={{0x0, 0x4}, 0x2000}}], 0x1c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000001340)={'syztnl0\x00', 0x0, 0x29, 0x6a, 0x2, 0x2, 0x2, @private1, @dev={0xfe, 0x80, [], 0x3f}, 0x0, 0x7, 0x8, 0xfff}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000013c0)={@loopback, 0x77, r7}) prctl$PR_GET_UNALIGN(0x5, 0x0) [ 433.449812][T15954] fuse: Bad value for 'fd' [ 433.501135][T15959] fuse: Bad value for 'fd' 21:45:31 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffffebffffff0800010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x24, 0x64, 0xd27}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 21:45:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800a7dd08770016d000000002000000", @ANYBLOB="dc06af74ee9caa254348f4651f6c1c0c246e6643b6c62cf65e9d5871e92a41548ab531755cde6b50b3ecd5455fd594798d3c2f67a8a66a11fe39c2d9482984aa40d1501c69706ba658bd88b72b714bb8a7543341b6d83259ed3da5c240da21a023b2c3f5eb3b208a2871f06bbb0baf9ae085f7ee84a4e72d92eb95cb3e76a206d0f00cb2a2b0a89e180df9b514de4efd7463954532e5efd5e14577f065f857ac7ade4b5e33ad4af1c95f29ed72872e05", @ANYRES16=r5], 0x1c}], 0x1, 0x0, 0x0, 0x20004080}, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 21:45:31 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000000)="ade7e4f8eae1c392cb23f18bbe1b79d57a6972cc3a0952bae3986e826070b8b262310cba37fdc66274bafd9f68fa87a1de686ba9d7c22719870fb461693fb55d25711171bd067046", 0x48}, {&(0x7f00000000c0)="df621ed261b9d0292e5bda377fb018869c086564b4e15ed276856319fce29f8bf1f216977062b12915438ec09756e27944dc3c1ce27870bf941ef4d00d9fde6fa532a054", 0x44}, {&(0x7f0000000140)="8ce673cc6bfa110ea02b2e87d2fe", 0xe}, {&(0x7f0000000180)="8f55c0dbf078c19486ea87755874fbadac8fd72124d030f04a9375064583d2fc40cc0e7bef8c353795f3a2a4e99a5e21837337e6801f06bb", 0x38}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000001c0)="ddbfbdb707e485817a674a71c7bc69e14ba07cec89da952f4b68b32a2feca271da913952ed4223b87cc94c74e0780fe390609b59479c7453655b5b7f66", 0x3d}, {&(0x7f0000000200)}, {&(0x7f0000001340)="b1a2f9d31a5828be4636ba3733812e85dcbe059b63c1a3796776c5c81a97bc2211ff0ac4f20d0afd00c003eb9624a3f007857972d5c1b2c52c7dbc9ba9ef6a88f15091461e7b0d3e0440032d7134972be177de37357510e6af8f70d82448f71e016e46ae3ba2a856809ef5bf01b1181bb77a08788934de57748fb7c8547c2380377c66", 0x83}], 0x9, 0x1, 0x100, 0x12) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0xe000000, {0x8, 0x0, 0xc002}, [@IFLA_OPERSTATE={0x5, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f00000015c0), 0x0) 21:45:31 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014092108ab12a190eb09000000010902240011000000000904410002ff5d8100d2ef59979a90af530009058303"], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VT_WAITACTIVE(r0, 0x5607) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) preadv2(0xffffffffffffffff, &(0x7f00000022c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/220, 0xdc}], 0x4, 0x1, 0x2, 0x4) [ 433.943277][T15990] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 433.960668][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 433.984976][ T3088] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 434.011822][T15938] IPVS: ftp: loaded support on port[0] = 21 [ 434.254873][ T3088] usb 4-1: Using ep0 maxpacket: 8 [ 434.375121][ T3088] usb 4-1: config 0 has an invalid interface number: 65 but max is 16 [ 434.386867][ T3088] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 434.408559][ T3088] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 434.428950][ T3088] usb 4-1: config 0 has no interface number 0 [ 434.443333][ T3088] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 21:45:32 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "01fa3a4e35786f693f2a52c2e90d2681"}, 0x11, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x3, 0x9, "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", 0x1, 0x81, 0x0, 0x4, 0x8, 0x4, 0x3}, r2}}, 0x120) openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a310000000000df40e65cc7802200000000000000000000000084000000000000000000000000000000000000000000000000200000000000000000000001000000000000000000000000000000000100258d7a35000000000019dd000000000000000000000000000000feffffff000000000000fb65c06bd485fb0bf49dc200000000000000000074b6628ddfb1cc186d6300000000000000000073797a31000000000000000000000001000000000003f4ffce0a0000000000000000000009000000000000000000000000000000000000000000000061b1000000000000000000000000000000003b38e967ac8200"/280], 0x12e) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000140)={0xa, {0x8000, 0x6, 0x6, 0x9}}) 21:45:32 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/105, &(0x7f0000000380)=0x69) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000007f000000282431b1716d7d4caa18113ee579a62539a9f4abd80b2261f43fa996d1adef041380edf986ba6fcd7a5e81de1f88836e47ae86fb150128319fa6149a4ae823f01a1e01ef428d8a23fe0fbef8fa05744eb33bdb721a1aebb791c88888e004e7259ff305ca898ad4be0cb2f9340cd47753a079714fd354ffa481ba3ca3b326e881a1daecb6496ee5dee2c14506fd467329b16bf3c6db8d7868"], &(0x7f00000000c0)=0xa3) r3 = socket(0x10, 0x803, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x17) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0xf) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x20, 0x3f, 0x8, 0x80, 0x0, 0x7fffffff, 0x224, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000003c0), 0x6}, 0x80, 0xffffffff, 0x5, 0x0, 0x0, 0x8, 0x3}, r4, 0xe, r5, 0x3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7f}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 21:45:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000003800120008000100677470002c000200080001"], 0x58}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140)={r6, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x8, 0x8}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r9, @ANYBLOB="0500000000f7cd6c"], 0x20}}, 0x0) 21:45:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x2a, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x0, 0x2, 0x3}, @main=@item_012={0x0, 0x0, 0xc, "10"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x45, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc339") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x508, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "509dfbbd0a17cac4465c6768797ddc52251b843dafc613e09f04f99d99ce5b22a0e02ce9d002f89b34455f913532f24a4865fe157c4e84d4722f3b275e794d0cc34277861436ed4aa63d216b4a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "10edb00f10beb01bf96ef58380a506ba691d6289fee7070dd49efddf3641ca7bb03c43ce95dfaa2f1b19542a752d37215ba7c8a02724defc3c0c597ab6e00c3ddc7474e35649d30198aa7ab2c267dbc3e3a19776d936ac2fea8f6d8705fd543c49f0c42b9e5ded5cb7b6b2ce4881063b248b8877551cf8dcd3a56531e63a95a8e36d229bc3152aaefa97ff25f7559f78004e5e9544af8a95f922677e5158f524a0d414323c0cd42fbdfca35ff92cd6097f49f9a122c52ba64d796a85c1f46027adf606786dcd39476f3dbb70313a9447a21988727d811dac122c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72e68f59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2c, 0x3, "4010ee135e6492fb8f9bce9fb93ede333753165694ac9badfe8d8a7e5ac2c2dc564798b90a629397"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f3ddc045ef15da4a6ffef5607beeb82071c4a42cd834220736f92fc72e5fcfe207"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "47eac75eb49fd65d3a3a013ddb3ddb6ec47a7f0c78f759eca29f14ec5c1a4e"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d259dbc81375e227445e26f9694669fb0ce6645608f"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "746b5eea026c185ccd031e868ee5f74f7213f958f65e63"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x800, @loopback, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7ff1c56}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x12}, 0x4}}, {0x20, 0x2, @in6={0xa, 0xd20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0x508}, 0x1, 0x0, 0x0, 0x4004c804}, 0x40004) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 434.481524][ T3088] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 434.503009][ T3088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.517039][ T3088] usb 4-1: config 0 descriptor?? [ 434.573049][T16045] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 21:45:32 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffffebffffff0800010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x24, 0x64, 0xd27}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 434.659548][T16052] IPVS: ftp: loaded support on port[0] = 21 21:45:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) kcmp(0x0, 0x0, 0x0, r2, r3) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x2bcf) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/61) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) [ 434.741988][T16055] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 434.791267][ T44] usb 4-1: USB disconnect, device number 21 21:45:32 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/249) ioctl$PPPIOCSFLAGS1(r0, 0x4004743c, 0x0) [ 434.875098][ T3088] usb 3-1: new high-speed USB device number 23 using dummy_hcd 21:45:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x14) r1 = dup(0xffffffffffffffff) r2 = dup(r1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) accept$inet(r2, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = userfaultfd(0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8042) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 434.998095][T16100] syz-executor.5 (16100) used obsolete PPPIOCDETACH ioctl [ 435.002710][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x0, 0x3d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept4$tipc(r6, &(0x7f0000000140)=@id, &(0x7f0000000240)=0x10, 0x40000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="020000a3d0940000c440a8ee3f0001000033c4357476c1f05088cdd948914f148392a5eb89f17a96000000640a4538702000000000dfff00000a000000000000000000b1179246", @ANYBLOB="3d6d41d3db692c52b61f363d28352ba30918c174030fba0b3ef35fc494e53b2654c0f492c6629c4d3a0f0c7b19a1d7fefe79f087eae376bc882f1cf39f695f112e80b1b8220cdfaf2f2faa3846e4c317064ae01a0ecffd69d09846aef642c9e2e67a29861d6f117cb9963152ca83494be2e09c3ccac2870f888cf8425a115e783d277981d8e5a154713725a20c829124b9cb35b90b4b15e69ebf9682ebdce8858622918bd90a1bf5d8d183de2c6802c9e2361dc1bd47ffa002f1cf4a7a268d503c93ea68f3a225fb1d69d8ed1c"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 435.265243][ T3088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.294896][ T3088] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 435.336818][ T3088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.376190][ T3088] usb 3-1: config 0 descriptor?? [ 435.566855][T16127] kvm [16118]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 [ 435.612897][T16127] kvm [16118]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0 [ 435.666959][T16127] kvm [16118]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0 [ 435.676403][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd 21:45:33 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002e00bb00"/20, @ANYRES32, @ANYBLOB="00000000000000000800f0000800010075"], 0x30}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffff8]}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x3, 0x3, {0xa, 0x4e23, 0x9, @empty, 0x6a9}}}, 0x32) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) 21:45:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000000000000900010073797a30000000003c000000090affff00000000000000000000000008000540000000120900020025237a300000000008000a40000000000900010073"], 0x84}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vsock\x00', 0x200, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001140)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0x1}, @in6={0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}], 0x38) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x8601, 0x0) [ 435.876640][ T3088] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 435.907621][ T3088] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input18 [ 435.944172][ T3088] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 435.963105][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 436.046774][T16155] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.109489][ T44] usb 4-1: config 0 has an invalid interface number: 65 but max is 16 [ 436.109507][ T44] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 436.109523][ T44] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 436.109538][ T44] usb 4-1: config 0 has no interface number 0 [ 436.109573][ T44] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.109599][ T44] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 436.109614][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.110943][ T44] usb 4-1: config 0 descriptor?? [ 436.358728][ T8173] usb 4-1: USB disconnect, device number 22 21:45:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000200)={0x3, @pix_mp={0x101, 0x20, 0x3031334d, 0xf, 0x1, [{0x4, 0xffffffff}, {0x675, 0xb5}, {0x10, 0xb5}, {0x81, 0xffffff7f}, {0x81a6, 0x1ae}, {0x222c7d5b, 0x7}, {0xd71, 0xffff5202}, {0x6, 0xfffffff9}], 0x1, 0x0, 0x8, 0x0, 0x2}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x24, &(0x7f0000000100)={{{@in6=@private0={0xfc, 0x0, [], 0x1}, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x200001000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfd19}, {}, 0x80000001, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty}, 0x0, @in=@dev, 0x3504, 0x1, 0x0, 0x0, 0x4}}, 0xe8) 21:45:34 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x20000001) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f350f01fc260f54a2af970f01da66b92e0b00000f320fbd21f081a2b0001abe0fc799000066b99a09000066b80400000066ba000000000f3066f20f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) kcmp(0x0, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffff9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES64=r6, @ANYRES16], 0x4c, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0x236, [0x0, 0x200003c0, 0x200005ae, 0x20000982], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x350) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:45:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x2}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf03c3) keyctl$KEYCTL_RESTRICT_KEYRING(0x10, 0x0, 0x0, 0x0) 21:45:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x3, [@struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {0x400000}, {}]}, @restrict, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "e1"}]}, {0x0, [0x0]}}, 0x0, 0x10b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 437.259238][T16171] debugfs: Directory '16171-5' with parent 'kvm' already present! 21:45:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x2a, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x0, 0x2, 0x3}, @main=@item_012={0x0, 0x0, 0xc, "10"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x45, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc339") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x508, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "509dfbbd0a17cac4465c6768797ddc52251b843dafc613e09f04f99d99ce5b22a0e02ce9d002f89b34455f913532f24a4865fe157c4e84d4722f3b275e794d0cc34277861436ed4aa63d216b4a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "10edb00f10beb01bf96ef58380a506ba691d6289fee7070dd49efddf3641ca7bb03c43ce95dfaa2f1b19542a752d37215ba7c8a02724defc3c0c597ab6e00c3ddc7474e35649d30198aa7ab2c267dbc3e3a19776d936ac2fea8f6d8705fd543c49f0c42b9e5ded5cb7b6b2ce4881063b248b8877551cf8dcd3a56531e63a95a8e36d229bc3152aaefa97ff25f7559f78004e5e9544af8a95f922677e5158f524a0d414323c0cd42fbdfca35ff92cd6097f49f9a122c52ba64d796a85c1f46027adf606786dcd39476f3dbb70313a9447a21988727d811dac122c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72e68f59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2c, 0x3, "4010ee135e6492fb8f9bce9fb93ede333753165694ac9badfe8d8a7e5ac2c2dc564798b90a629397"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f3ddc045ef15da4a6ffef5607beeb82071c4a42cd834220736f92fc72e5fcfe207"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "47eac75eb49fd65d3a3a013ddb3ddb6ec47a7f0c78f759eca29f14ec5c1a4e"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d259dbc81375e227445e26f9694669fb0ce6645608f"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "746b5eea026c185ccd031e868ee5f74f7213f958f65e63"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x800, @loopback, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7ff1c56}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x12}, 0x4}}, {0x20, 0x2, @in6={0xa, 0xd20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0x508}, 0x1, 0x0, 0x0, 0x4004c804}, 0x40004) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 21:45:35 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x20000000}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000640)=""/99, &(0x7f0000000180)=0x63) 21:45:35 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xffffffffffffffa9) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff9, 0xffff}, {0x2, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) r4 = dup(r1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x882200}) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000002b80)={0x7, 0x8}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000340)=0x2, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000100100000400000000000000000000000009998301edad579b48073eecb0000000e3b89f60e222466be30d34e6ef068de0dfa6c85c196d756def3175f29ed28a941ab755a03ce9968d091869"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 21:45:35 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x200000, 0x0) sendto$rxrpc(r3, &(0x7f0000000080)="029ed137322081056246a8ae476a79b9ba99acb10c074805c25728115ff50c571172a27bb3d62f3454c4ed15783e591c53e76983dd376ceb5d24d8c3f321a7707fab7480054e98ea24637126feb45abe2af1893711a31a8187ce65ada749eaa0e23c84dc0abebdb5b2d96407773b40f3b5b34e70c58e6d2850b50a348949fdd3e1b8d0874267f6896422280e9e64eef2a3bc4c86", 0x94, 0x0, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @multicast2}}, 0x24) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 437.599197][ T44] usb 3-1: USB disconnect, device number 23 21:45:35 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@dstopts={0x1, 0x30, [], [@ra={0x5, 0x2, 0x2000}, @generic={0xb3, 0xc6, "f9d449f95a446a0ec021075bf3db34eca18874a9e9a920b5b4e50441c7f46aceb51556a722ec57ce9f93eff04dc575c1d31efb2e96f589a0c2d11166e0152dd3bf5c94c2d360a188975b391153f720187d72e93e66c12770251c2374ca37854682d156071bc8f3706687a4e22cffe244f354b29d14a7585c57b6f66f7b7300f08d44e341dcdf57bd4e7e68070781f03f22f826d2301b7266f5dcbce0f9685da4486f06bb87d256ef0d2d704507e0d9092d77a24e4ec82b6231cb54f88383031e1f026c93c30e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x4, 0xb, "ff9fae36d1011e3d9f13cb"}, @hao={0xc9, 0x10, @private0}, @generic={0x1, 0x8a, "ea57f752be6c97bf5fc270242043dba631d4853caae1c17c30448504414c54ea997dffac318db269314518d673032477e6702c408bda2249f02ace3e28f24338bd474c2861d7ed8134684104f0795b6b53140b9872d038fea1a062f323a390d620a96561eabd93d2ed0ceb2151181465b0baa85be6752d159dc16cb583f70e8be6418493c21291d613c9"}]}, 0x190) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 21:45:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r1 = gettid() tkill(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440)={0x2400, {"a2e3ad21ed6b52f99cfbf4c087f719b4d026e7ff7fc6e553f836500e8b546a1b374b94370890e0878fdb1ac6e704e366b4956c409b3c2a5b67f3988f7ef31952a981ffe8d178708c523c921b1b5a4b0a169b5b9b36cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179cef309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900000000000000a85e89c46329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f19001800000bc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710acf2e31caa04b2e286bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb7dc7ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6f00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432971215d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081f758cefcce3fbf4625a7e7de40e42e07b34449e15eb0305626afb1dd179b8a065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40595af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea40686e730861e83d89d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7d528ed15b97c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a283e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90", 0x597}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8000}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x1423}], 0x3, &(0x7f00000000c0), &(0x7f0000000140)={[0x5c]}, 0x8) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffe9c) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100085060000000000000000000000007dd7786f413fd35fed8d5968d430c1df6aa74cd64fd977b4fb507405f3c89bfb3f008cd904a0a543ee94b2920f8ea5dededdf8eb761732d0a04352a0e0be69e1f226e0418167d54185ad00c11995683e96037ca3c8bc2a0683503957b84eff975f518bcb913a9b5a411289", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000024200b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b0001006d756c74697100000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:45:35 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/1131]}, 0x4e3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x7, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044840}, 0x8040840) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_int(r0, 0x10d, 0x1, 0x0, &(0x7f0000000000)) 21:45:35 executing program 5: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x800000000031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x301000, 0x4d, 0x6}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x000', @ANYRES32=r1, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33}}) [ 437.872280][T16241] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 437.897561][ T62] tipc: TX() has been purged, node left! [ 437.908202][ T62] tipc: TX() has been purged, node left! 21:45:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffeb, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x703, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x80}]}}}]}, 0x3c}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000500)={{0x3, 0x2, 0x100, 0x7, 'syz0\x00'}, 0x0, [0x72a, 0xffffffffffff8000, 0x2, 0x3, 0x1000, 0x20, 0x2, 0x4, 0x20, 0xc8f4, 0x3, 0x3, 0x80000000, 0x2, 0x0, 0xbfef, 0x6, 0x100000000, 0x7, 0x9, 0xffffffff, 0x0, 0x29, 0xfffffffffffff96f, 0x100400, 0x7, 0x2d069090, 0x7ff, 0x3ff, 0x2, 0x4, 0x240000000000, 0x5, 0x0, 0x3ff, 0x7, 0xb5, 0x0, 0x6, 0x8001, 0x9, 0x4, 0x2, 0xfffffffffffffffb, 0x8, 0x7, 0x1, 0x3, 0x0, 0x7fffffff, 0x80000001, 0x1, 0x1, 0x1, 0x2, 0xf5, 0x5, 0x4, 0x6, 0x7, 0x1ff, 0x200, 0x3, 0x1, 0x4af, 0x9, 0xfff, 0xfffffffffffffff8, 0x8c1, 0x100000000, 0xdab8, 0x5, 0x7fff, 0x7, 0x7fffffff, 0x5, 0x7, 0x800, 0xffffffffffffffe1, 0x5de, 0x5, 0x1, 0x8, 0x5, 0x3ff, 0x9, 0x7, 0x6, 0x0, 0x100000000, 0x5, 0x7, 0x3, 0x8, 0x3f, 0x10000, 0x9, 0x80000000, 0x7, 0x431, 0x7, 0x67c, 0xfffffffffffffffd, 0x6, 0x8, 0x6, 0x9, 0xff, 0x5, 0x37, 0x3ff, 0x8, 0x9, 0x3ff, 0x9, 0x6, 0x3, 0xffffffffffffff06, 0x8000, 0x7, 0x9, 0x23b, 0x1, 0x4, 0x5, 0x9, 0x7fffffff, 0x6]}) [ 437.934975][ T9400] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 437.942821][ T62] tipc: TX() has been purged, node left! [ 437.964026][T16250] net_ratelimit: 242 callbacks suppressed [ 437.964033][T16250] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 21:45:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24008814) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="969f1c00", @ANYRES32=0x0, @ANYBLOB="576e285400000000340012800b0001006970766c616e00002400028006000100010000000600020002000000060001000200000006000200000000000a000500040000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0500270000000000"], 0x70}}, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000100)=""/25) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000200)={{0xff, 0x3}, {0xf, 0x80}, 0x7, 0x7, 0x80}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 438.144757][ T44] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 438.174998][ T8173] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 438.304997][ T9400] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 21:45:36 executing program 4: mknodat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xd010, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) [ 438.454755][ T8173] usb 1-1: Using ep0 maxpacket: 16 [ 438.494997][ T9400] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.504039][ T9400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.551337][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.554670][ T9400] usb 4-1: Product: syz [ 438.574435][ T44] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.591881][ T9400] usb 4-1: Manufacturer: syz [ 438.600304][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.610376][ T9400] usb 4-1: SerialNumber: syz [ 438.614781][ T8173] usb 1-1: config 0 has no interfaces? [ 438.630965][ T44] usb 3-1: config 0 descriptor?? [ 438.675669][ T9400] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 438.695705][ T8173] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 438.722136][ T8173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 438.752074][ T8173] usb 1-1: SerialNumber: syz [ 438.776075][ T8173] usb 1-1: config 0 descriptor?? [ 438.941547][T16246] usb 4-1: USB disconnect, device number 23 [ 439.029636][T16247] udc-core: couldn't find an available UDC or it's busy [ 439.048795][T16247] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.146738][ T44] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 439.180938][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input19 [ 439.228215][ T44] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 21:45:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_robust_list(&(0x7f00000002c0)={0x0, 0xffffffffffffff78, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xa4, 0x4, 0x8, 0xc19e936548b53efa, 0x0, 0x0, {0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb252}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x11f7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40090) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000214fd4)={0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000]}, 0x2c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x2, 0x4}, 0x7fff}) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000075, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x5a3, 0x40, 0x621, 0xc49}, 0x10) [ 439.738071][ T44] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 440.134716][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 440.334830][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.343873][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.364598][ T44] usb 4-1: Product: syz [ 440.368775][ T44] usb 4-1: Manufacturer: syz [ 440.373346][ T44] usb 4-1: SerialNumber: syz [ 440.445532][ T44] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 440.640595][ T2547] usb 4-1: USB disconnect, device number 24 [ 440.831671][T13769] usb 1-1: USB disconnect, device number 18 21:45:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) dup2(r0, r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = gettid() tkill(r3, 0x40) r4 = syz_open_procfs(r3, &(0x7f0000000400)='net/wireless\x00') getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000440)={'security\x00'}, &(0x7f00000004c0)=0x54) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000000380)={0x200, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000180), {0xc}, &(0x7f00000001c0)=""/112, 0x70, &(0x7f0000000240)=""/114, &(0x7f00000002c0)=[0xffffffffffffffff, r3], 0x2, {r5}}, 0x58) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200002) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 21:45:38 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/mnt\x00') timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x3, 0x1, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) splice(r3, 0x0, r2, 0x0, 0xa, 0x0) 21:45:38 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="358ca851280b"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x200440d8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x8000000000000003, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0xb, 0x201, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xb, 0x1, 'batadv\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r8, @ANYBLOB="00ed0300f1ffffff0100000000000000687401800000020055311f386c1800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x40000000000024a, 0x0) 21:45:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_robust_list(&(0x7f00000002c0)={0x0, 0xffffffffffffff78, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xa4, 0x4, 0x8, 0xc19e936548b53efa, 0x0, 0x0, {0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb252}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x11f7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40090) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000214fd4)={0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000]}, 0x2c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x2, 0x4}, 0x7fff}) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000075, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x5a3, 0x40, 0x621, 0xc49}, 0x10) 21:45:38 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x3, 0x12, 0x1, "44220c6eab7a15b8121988cec6ca17ae9b4b682c9a852272e325b41f1acd965b513a98fce7e2399a898bcd2bdcd70e2d4f8eaa938a035ba45638ddbcba683d8c", "0688db092b0f1f9bbb088bcf07b96504e9aaf26405c7fdcf7b0fc29276fdf81a", [0x9, 0x7fff]}) setsockopt$inet_int(r1, 0x0, 0x26, &(0x7f00000000c0)=0x101, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 21:45:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @random}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xffff, 0x0, 0x0, 'queue0\x00', 0x200}) sched_rr_get_interval(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40086602, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f00000000c0)) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) pipe2$9p(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) [ 440.885711][ T8092] usb 3-1: USB disconnect, device number 24 [ 440.894648][ C1] keytouch 0003:0926:3333.000B: usb_submit_urb(ctrl) failed: -19 [ 441.040324][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 441.178603][T16382] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @random}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xffff, 0x0, 0x0, 'queue0\x00', 0x200}) sched_rr_get_interval(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40086602, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f00000000c0)) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) pipe2$9p(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 21:45:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @random}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xffff, 0x0, 0x0, 'queue0\x00', 0x200}) sched_rr_get_interval(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40086602, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f00000000c0)) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) pipe2$9p(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 21:45:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) dup2(r0, r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = gettid() tkill(r3, 0x40) r4 = syz_open_procfs(r3, &(0x7f0000000400)='net/wireless\x00') getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000440)={'security\x00'}, &(0x7f00000004c0)=0x54) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000000380)={0x200, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000180), {0xc}, &(0x7f00000001c0)=""/112, 0x70, &(0x7f0000000240)=""/114, &(0x7f00000002c0)=[0xffffffffffffffff, r3], 0x2, {r5}}, 0x58) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200002) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 21:45:39 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x8, 0x2, 0x81, 0x4, 0x2}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x4}}) 21:45:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}}, 0x0) 21:45:39 executing program 4: unshare(0x40000000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x80047453, &(0x7f0000000000)) 21:45:39 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/unix\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x1c01) [ 441.982973][T16413] IPVS: ftp: loaded support on port[0] = 21 [ 442.189763][T16413] IPVS: ftp: loaded support on port[0] = 21 [ 442.302699][ T3508] tipc: TX() has been purged, node left! [ 443.596423][ T3508] tipc: TX() has been purged, node left! 21:45:41 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x3}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) 21:45:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f00000002c0), 0x84800) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) close(0xffffffffffffffff) sendto$isdn(0xffffffffffffffff, &(0x7f0000000180)={0x101, 0x4, "09ae50bc968dce59a5843eef80f3145450cd76add7172414f1beec25d0b24a66ddb2c4ec05f716b28ecef0d6ac54a1acc56d655bb1ee61b70d71e55b19ccdaff31e29c29c0a013fa7a0a341d7353a1ffc3ebc0668eb9aee753b3544890a5479b9f0a4939367a3d6f2c91e578"}, 0x74, 0x4800, &(0x7f0000000240)={0x22, 0x2, 0x4, 0x20, 0x4}, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x3c, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xec9}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x83}]}}]}, 0x6c}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:45:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000407d1e512d40000000000109022400010000000009040000010301020009211000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, "1fa3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000200), 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x10f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd, 0x3, 0x1, 0xd5, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x4e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x8, 0x5d, "1876f29ac10915ed66"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xfcca, 0x5c, "75846fd2f5564f"}, @as_header={0x7, 0x24, 0x1, 0x79, 0x4, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x40, 0x2}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x340, 0x0, 0x1, "51c865c6"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x4d, 0x2, "5d762092817e72"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x9, 0x3, {0x7, 0x25, 0x1, 0x82, 0x3, 0x54ed}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x7, "e82197afb004ef0f"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x3b, 0x1, "9ced58a1"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0x7, "81b654fbe03d138fce"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x4, 0x9, 'B%'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1f, 0x20, "6cdf047fead61dd6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x6c, 0xff, "a2", "ec71"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0x9, 0x7, {0x7, 0x25, 0x1, 0x41, 0x1f, 0x1}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x11, 0x1f, 0x1, 0x8, 0xc7}, 0xbe, &(0x7f0000000400)={0x5, 0xf, 0xca, 0x4}, 0x6, [{0x9e, &(0x7f00000004c0)=@string={0x9e, 0x3, "4cd30f07b3ecf9ada8c1f5a2dca81304faa839fe8e9afdf99396ddbdf771b7d80b419e8a847929871ebdaab1c1954313df49aa31761bbb6025927dd70f53e4a94b6d771509f0dee3bdc8c70b17b70ead6a8e691216f51b9f247a60a9f754f37b7caeda2f5b863a6213861989a38ef5a82e15b7745c5b6c00e97a30353b1996d9598df7d614849b4ca2f077728e54d3ffb3aaa01437a1d38b557c6ffc"}}, {0x79, &(0x7f00000000c0)=@string={0x79, 0x3, "e3fadaf3ea7ffec48bbcb9bd8ccaa011149058ce0be713827bea943c2681530f99d7ed02e8eb356575a26e37a97aede47ca0b4e4054bb578e9428d44b59d6318d5b2d28ff69acd752629de616dd0f7389f329171578e0692f6eebbd8ba2bf1ac982f70b384426bc49e9d0ad5ae42d625b2f659e78268c9"}}, {0x95, &(0x7f0000000580)=@string={0x95, 0x3, "c77f31da7b6e1d17c5af052deb80d851b3d5f5122bf7ba86c39f516f834aa762d7c6e0b6d2f2fc1de804d6d6c928908e95103f59ac2c9ea2461470a2b8189f43aa0444077b8aabf4759748743215eee87f5af54c271e02907dde8d351bc6c4034ad6f699915d5b0b25225073dfc34e0667fab5381338719366c0e5a2e3e6c74d00c89788872f105124e535abcd6047069eab3f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x2, &(0x7f00000006c0)=@string={0x2, 0x3, "af2941"}}, {0x74, &(0x7f0000000640)=@string={0x74, 0x3, "68232ef33ea2742e727758494a3c9dd6b27b55e46297fe1df175601c0654a29c9561db944a86393175c3fa052683a2d92c5039421c03582226cce7dbca64de8fca6070561bb32326608945bc9c5d23c924f022f1521dc7e6e366506176fb39f9e9fe99fbed1b44fc0f141c4207b69ebc378f"}}, {0x0, &(0x7f00000003c0)=@lang_id={0x0, 0x3, 0x402}}, {0x0, &(0x7f0000000740)=@string={0x0, 0x3, "5c1369b4e08a9bf4bc31985af44857aefeed407a1846f26e2adf52f00d5f9f586636eab1a37bb905fd4adfcc8859465eb54043c3d477c68647e2f1b7"}}]}) close(r2) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/156, 0x9c) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) 21:45:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getpriority(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={r4, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @remote}}}, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000040)={0x1, 0x1, 0x2}) 21:45:41 executing program 3: socket(0x11, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x8000) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='l', 0x1, r0) 21:45:41 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x802f, &(0x7f0000000080)=0x2) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x400000, 0x4) 21:45:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = dup(r2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000100)={0x1, 0x6000}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800baebd5db4e42d9006206428e7fc4b74600060000000061"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0xffffffff}, 0x10}, 0x78) [ 444.067313][T16484] l2tp_ppp: tunl 2: set debug=464c457f [ 444.103900][ T21] l2tp_core: tunl 2: closing all sessions... [ 444.124488][ C1] l2tp_core: tunl 2: closing... [ 444.139029][T16488] l2tp_ppp: tunl 2: set debug=464c457f 21:45:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000100)='./file1\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100}, 0x0, 0xa, r1, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x4, 0xfffffffa) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c) ftruncate(0xffffffffffffffff, 0x200005) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) close(r0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x145042, 0x0) sendfile(r2, r5, 0x0, 0x80001d00c0d0) [ 444.184709][ T160] l2tp_core: tunl 2: closing all sessions... [ 444.224533][ C0] l2tp_core: tunl 2: closing... 21:45:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0xd22, "049c7e52f36cfaea1f857f90119ad43c88291ee5260d1ffe4ebe8beba6ddebd5", 0x1}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xa1c5a) 21:45:42 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000400)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000000000002000000000010000000", @ANYRES32=r3, @ANYBLOB="00971567f5a8f05c26dc2e"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000440)={0x3}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c331b83389d9"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x3d}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r3], 0x18}}, 0x0) [ 444.304420][T13769] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 444.394006][T16499] IPVS: ftp: loaded support on port[0] = 21 21:45:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r0, 0x9) [ 444.684893][T13769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:45:42 executing program 0: syz_usb_connect(0x0, 0x65, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000f1aaf010d2193515da0f0000000109025300010000a0000904b10000ffffff000a24013900080201020b24040508f5f618bca1a30c2407030100018d0741538209240302000002017f072404060351c611240605060506000f0006000000080001928c90beb56317248ce4921f5a13d971b1cd0da074bf946e68f1fca08aca1eece52c618d1ceb"], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1a0, 0x1, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x3c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xbc}]}}, @CTA_TUPLE_MASTER={0xc0, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_NAT_DST={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0xc, 0x17, [0x4, 0xe9]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x10200, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2881, 0x162) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x4, 0x43a4}) [ 444.727934][T13769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.801498][T13769] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 444.828258][T13769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.870917][T13769] usb 2-1: config 0 descriptor?? [ 445.036051][T16499] IPVS: ftp: loaded support on port[0] = 21 21:45:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4080, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28000001}, 0x40080) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x4e21, @empty}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r3, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/4077, 0xfed}, {0x0}], 0x2) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 21:45:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) fcntl$setsig(r1, 0xa, 0x2d) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaa8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fc010000000000000000000000000000fe8000000000000000000000000000bbbc31e11c303a53c5faa22617ca82f4b2e811f7a764c68f51cca787229979b3b3e0486eeecda02d3d10432d841dedd80af6c9fb818ef2e8bb7e9d0e1487a0087f601e3e89dc6b8773a5dcb1c9a7334b8ec49c5d04eb34340e0d9041f8e5af55dbfc3ebd834a71401231bd93b9a376fa7a13cc82950d6bd86fa865b95967c175125c831764"], 0x62) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r4, 0x0, r6, 0x0, 0x18102, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x9, 0xe0000000, 0x1, 0x2, 0x81, 0x9, 0x10000, 0x0, 0x0, 0xff, 0x8, 0x401, 0x7ff, 0x81, 0x13, 0x0, {0x101, 0x8}, 0x1, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffff7) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0x9, 0x0, 0xaf6b, 0x7fffffff}, 0x10) [ 445.180397][ T8194] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.357986][T13769] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.10 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 445.434423][ T8194] usb 1-1: Using ep0 maxpacket: 16 [ 445.565737][T13769] koneplus 0003:1E7D:2D51.000C: couldn't init struct koneplus_device [ 445.573854][T13769] koneplus 0003:1E7D:2D51.000C: couldn't install mouse [ 445.584571][ T8194] usb 1-1: config 0 has an invalid interface number: 177 but max is 0 [ 445.592745][ T8194] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 445.625699][T13769] koneplus: probe of 0003:1E7D:2D51.000C failed with error -71 [ 445.635043][ T8194] usb 1-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 445.679587][T13769] usb 2-1: USB disconnect, device number 14 [ 445.689114][ T8194] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 445.719852][ T8194] usb 1-1: config 0 has no interface number 0 [ 445.728402][ T8194] usb 1-1: config 0 has no interface number 1 [ 445.735728][ T8194] usb 1-1: too many endpoints for config 0 interface 5 altsetting 8: 245, using maximum allowed: 30 [ 445.747850][ T8194] usb 1-1: config 0 interface 5 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 245 [ 445.778767][ T8194] usb 1-1: config 0 interface 5 has no altsetting 0 [ 445.804418][ T8194] usb 1-1: New USB device found, idVendor=19d2, idProduct=1535, bcdDevice= f.da [ 445.813450][ T8194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.826540][ T8194] usb 1-1: config 0 descriptor?? [ 445.866244][ T8194] option 1-1:0.177: GSM modem (1-port) converter detected [ 446.094422][ T8194] usb 1-1: string descriptor 0 read error: -71 [ 446.144464][ T8194] usb 1-1: USB disconnect, device number 19 [ 446.151144][ T8194] option 1-1:0.177: device disconnected [ 446.354370][T13769] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 446.713566][ T3508] tipc: TX() has been purged, node left! [ 446.719457][ T3508] tipc: TX() has been purged, node left! [ 446.754518][T13769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.765560][T13769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.775611][T13769] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 446.785223][T13769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.794013][T13769] usb 2-1: config 0 descriptor?? [ 446.864407][ T3088] usb 1-1: new high-speed USB device number 20 using dummy_hcd 21:45:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r1, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x406, r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r10, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newneigh={0x58, 0x1c, 0x400, 0x8070bd26, 0x25dfdbfb, {0x13, 0x0, 0x0, 0x0, 0x11, 0x2, 0x6}, [@NDA_SRC_VNI={0x7}, @NDA_DST_IPV6={0xfffffffffffffec7, 0x1, @mcast1}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_LINK_NETNSID={0x8, 0xa, 0xfffbfffa}, @NDA_MASTER={0x8, 0x9, 0xff}, @NDA_PROBES={0x8, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff26, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x0) 21:45:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000001340)={0x1c, &(0x7f0000001240)={0x0, 0x0, 0x4, "ab4f573b"}, 0x0, 0x0}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:45:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4080, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28000001}, 0x40080) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x4e21, @empty}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r3, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/4077, 0xfed}, {0x0}], 0x2) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 21:45:44 executing program 5: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="aae123a0c5d6acae63120efef4e0eaad93db6c08adbbfc751fa3ea2db3527c667aebed701ed4985f50641beb75021c7e4e5a443ed88ab237fa13c94cb9ef9ccf", 0x40) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="1f00000000401800280012800a00010076786c616e00000018000280140010"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:45:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x84, @rand_addr=0x64010102, 0x4e20, 0x0, 'nq\x00', 0xd, 0x677, 0x52}, 0x2c) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000500)=""/198, 0xc6}], 0x3}, 0x0) pipe(&(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x2c}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') [ 447.054869][T16626] tipc: Started in network mode [ 447.062220][T16626] tipc: Own node identity 7f, cluster identity 4711 [ 447.070585][T16626] tipc: 32-bit node address hash set to 7f [ 447.087232][T13769] usbhid 2-1:0.0: can't add hid device: -71 [ 447.093266][T13769] usbhid: probe of 2-1:0.0 failed with error -71 [ 447.123773][T16632] IPVS: ftp: loaded support on port[0] = 21 [ 447.134330][ T3088] usb 1-1: Using ep0 maxpacket: 16 [ 447.159954][T13769] usb 2-1: USB disconnect, device number 15 21:45:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000300)={0x19c, 0x4, &(0x7f0000000480)}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) semop(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x100) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'team_slave_1\x00'}) sched_rr_get_interval(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)=0x80000000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x2000000d) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) [ 447.254632][ T3088] usb 1-1: config 0 has an invalid interface number: 177 but max is 0 [ 447.262814][ T3088] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 447.298828][ T3088] usb 1-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 447.334775][ T3088] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 447.345252][T16243] usb 5-1: new high-speed USB device number 13 using dummy_hcd 21:45:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0xfffffecc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0xfffffffeffc, 0x0, 0x0, 0x8, [{0x100000000, 0xa2d2, 0x6, [], 0x4}, {0x5, 0x7fff, 0x8639, [], 0x80}, {0x7fffffff, 0x4, 0x4, [], 0x200}, {0x5, 0xccb, 0x92}, {0xffffffff, 0x0, 0x31a, [], 0x4}, {0x5, 0x19a3, 0x3f, [], 0x900}, {0x10000, 0x800, 0x100000000, [], 0x1408}, {0x5, 0x2791, 0x7, [], 0x200}]}) [ 447.373172][ T3088] usb 1-1: config 0 has no interface number 0 [ 447.403191][ T3088] usb 1-1: config 0 has no interface number 1 [ 447.428354][ T3088] usb 1-1: too many endpoints for config 0 interface 5 altsetting 8: 245, using maximum allowed: 30 [ 447.470218][ T3088] usb 1-1: config 0 interface 5 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 245 [ 447.515010][ T3088] usb 1-1: config 0 interface 5 has no altsetting 0 [ 447.537738][ T3088] usb 1-1: New USB device found, idVendor=19d2, idProduct=1535, bcdDevice= f.da [ 447.567999][ T3088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.584399][T16243] usb 5-1: Using ep0 maxpacket: 16 [ 447.600365][ T3088] usb 1-1: config 0 descriptor?? [ 447.656383][ T3088] option 1-1:0.177: GSM modem (1-port) converter detected [ 447.767856][T16639] IPVS: ftp: loaded support on port[0] = 21 21:45:45 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa300002802c000180a00600000000000008000000000000001b0000000000000008000000000000000800000000000000180002801400018008000d000000000008000f000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000008000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fe8000000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) [ 447.829817][T16243] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 447.840857][T16243] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 447.856450][ T3088] usb 1-1: string descriptor 0 read error: -71 21:45:45 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', {0x7, 0xfffe, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fffffffffdffffa8aaaaaaaa9100000081"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:45:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@loopback}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pwritev(r1, &(0x7f0000001380)=[{0x0}, {&(0x7f00000014c0)}, {&(0x7f00000015c0)="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", 0xfd}, {&(0x7f00000016c0)}, {&(0x7f0000001180)="8cfccfc4e44b0357aec0a3c20f349c6d729aab2b03aa3d6a5e5fb0b2b0016e3a922e59e3ef278c2a59eae93fe24593", 0x2f}, {&(0x7f00000017c0)="b712a21bcc32f541d52b81fac3b85b3f77475a637fb52a3550d6b87099d366b17d31bb8088b628eb9f2dcf495a37159d5e2c485f16df360ea1a7b6f314429407830092523720d5cec284002bafa7a158db7b75fdc0ad6f46375ea3b2db51733041ac0e72ac1d6223d9037b9d362c0842e07850cbdf73d2ca4f621bf4cbbd2901370fc774a0cacaa1147183c55ee998ba912aa0f2b18b3dd6f9", 0x99}], 0x6, 0x8, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x200, 0x400) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xc0fe}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') readv(r1, &(0x7f0000001400)=[{&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001240)=""/177, 0xb1}, {&(0x7f0000001300)=""/79, 0x4f}, {&(0x7f0000001440)=""/100, 0x64}], 0x4) [ 447.876806][T16243] usb 5-1: Manufacturer: syz [ 447.887125][T16243] usb 5-1: SerialNumber: syz [ 447.968640][ T3088] usb 1-1: USB disconnect, device number 20 [ 447.993118][T16243] usb 5-1: config 0 descriptor?? [ 447.999222][ T3088] option 1-1:0.177: device disconnected [ 448.046311][T16243] i2c-tiny-usb 5-1:0.0: version 63.ce found at bus 005 address 013 [ 448.102963][T16704] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. 21:45:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x4, 0x3}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/89) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2, 0x81000000}, 0x0) 21:45:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000000)={0x8, 0x3, 0x8, 0xb0fd, 0x1f9cc03a, 0x1}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) [ 448.310305][T16734] device lo entered promiscuous mode [ 448.342448][T16734] device tunl0 entered promiscuous mode [ 448.385695][T16734] device gre0 entered promiscuous mode [ 448.434982][T16734] device gretap0 entered promiscuous mode [ 448.452302][T16734] device erspan0 entered promiscuous mode [ 448.465468][T16734] device ip_vti0 entered promiscuous mode [ 448.483441][T16734] device ip6_vti0 entered promiscuous mode [ 448.508585][T16734] device sit0 entered promiscuous mode [ 448.520559][T16734] device ip6tnl0 entered promiscuous mode [ 448.536990][T16734] device ip6gre0 entered promiscuous mode [ 448.569256][T16734] device syz_tun entered promiscuous mode [ 448.592888][T16734] device ip6gretap0 entered promiscuous mode [ 448.621665][T16734] device bridge0 entered promiscuous mode [ 448.639729][T16734] device vcan0 entered promiscuous mode [ 448.658126][T16734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:45:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 448.683676][T16734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.694368][T16243] i2c i2c-0: failure reading functionality [ 448.729286][T16243] i2c i2c-0: connected i2c-tiny-usb device [ 448.747283][T16734] device bond0 entered promiscuous mode [ 448.764993][T16734] device bond_slave_0 entered promiscuous mode [ 448.784719][T16243] usb 5-1: USB disconnect, device number 13 [ 448.813046][T16734] device bond_slave_1 entered promiscuous mode [ 448.884590][T16734] device team0 entered promiscuous mode [ 448.914989][T16734] device team_slave_0 entered promiscuous mode [ 448.945075][T16734] device team_slave_1 entered promiscuous mode [ 448.952158][T16734] device dummy0 entered promiscuous mode [ 448.962773][T16734] device nlmon0 entered promiscuous mode [ 448.969001][T16734] device caif0 entered promiscuous mode [ 448.969014][T16734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.464186][T16243] usb 5-1: new high-speed USB device number 14 using dummy_hcd 21:45:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf) shutdown(r0, 0x1) syz_open_dev$vcsa(0x0, 0x0, 0x10401) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1329824, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$l2tp(r1, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0xa, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 21:45:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x0, {0x100, 0xf93, 0x3ff, 0x7ff}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 21:45:47 executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0xfdf8, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xe0802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000180)={0x40, 0x2000, 0x400, 0x360, 0x73d71f6c, 0x6, 0x4, 0x2, {0xd0, 0x200}, {0x4, 0x2}, {0x1, 0x401}, {0x4, 0x9}, 0x5, 0x1, 0x20, 0x10000, 0x0, 0x2, 0x0, 0x438, 0x20, 0xfff, 0x8, 0x1, 0x2f, 0x0, 0x2, 0x7}) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40200, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = getpid() getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2}, &(0x7f00000002c0)=0x8) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet(0xa, 0x80000, 0x184) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240), &(0x7f0000000280)=0xc) syz_open_procfs(r2, &(0x7f00000000c0)='projid_map\x00') 21:45:47 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4048010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x2}, 0x0, 0x0, &(0x7f0000000140)={0x1, 0x1, 0x108, 0x4}, &(0x7f0000000240)=0x1ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xffff}}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x60}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000004000000000000062010000000000009500000200000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000480)) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000400)={0x80, 0x1, 0x4, 0x2, 0xfffffff7, {}, {0x4, 0x2, 0x2, 0x6, 0x5, 0x2, "eafd73b1"}, 0x401, 0x1, @offset=0x1, 0x3ff, 0x0, r7}) 21:45:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000100)=0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x2fa24, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x101042, 0x1e8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f00000001c0)=0xffffffff) socket(0x0, 0x803, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 21:45:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 21:45:47 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000af9af82aa62a385485a395297db94f8c4b9bf3fae87fd8a8640f74a335f611536a012d7728c5a99f0068d7431d79bb812f1c326e0576e155b0adc5e97a7a44f5a356767ef23c7b90788c6a7070b911be69fa4660c08a34bb93fadd94771f22a9657481026e34ba27235b20f81746d2e5180a7441b55fd28fae5d8f13d84eca9b98f5a57c6c8b8f5f7bd229cc3850a9bac8f2c5d6468a5201968f4434bbe72941834a023ce336c4b440e261b7942b7ac19f1b7dbcc62e56334bf5f0ef63e197"], 0x0) 21:45:47 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) msgget$private(0x0, 0x40) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc58, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:48 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001900000126bd7000fddbdf251d010d0005f70c000800000008000900", @ANYRES32=0x0, @ANYBLOB="15000400040000000200000044fea8fc12d2135304000000150002000400004004050000ff81b5cda5e2c5aa01000000"], 0x54}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) 21:45:48 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x2, 0x1, @start={0x401, 0x1}}) r2 = socket(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000190003041dfffd946f6105000a00000a1f000003006708000800060040000000280000001100ffffba16a0aa1c09000000000000120000000000efa47e23f7efbf54200000000000", 0x4c}], 0x1}, 0x0) 21:45:48 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001900000126bd7000fddbdf251d010d0005f70c000800000008000900", @ANYRES32=0x0, @ANYBLOB="15000400040000000200000044fea8fc12d2135304000000150002000400004004050000ff81b5cda5e2c5aa01000000"], 0x54}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) 21:45:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x80, 0x0) r1 = gettid() tkill(r1, 0x40) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x400200, 0x0) sendfile(r3, r2, 0x0, 0x100000000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x802, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000200)="bfe7d9db3366043df1d3cb95a0d75308e50c350d2e67a25b3fd9506d56f26460351f2c1ab8641d9bf14fc906f28820aebb8de5fbca0a8f3698a5c7e52038dbc2f995de2c0636f924196ea04ddbbb9297822b54fdb87411577f621cb31720ad88f94573d728caeec5118829609b7291815c314b91f2335c0e93aebb1d6ca3c14a374d728ec117da026e82169eefbc55a461a63ae34718f4a9348c55a4e00ad9439d807f0a9dd20c7f1e35449744063b5bbba3bd043eeec5c923bd148f4f304d2b45c71f88b1bc0d8d65d97859613405e242371c"}, 0x20) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000100)=""/104) [ 450.470830][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 21:45:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000300)=@ethernet={0x306, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)="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", 0xfd}, {&(0x7f00000019c0)="0baf703a5d96554219b9e121ef1525e274b3a759f9d7e5f2c4169a5f1df437762c072db0ea15d38cdfcb2cb79624ed685e3ba0cb6a0c1617addae1d664ab70d815a14c8b30c7c4fa4c48b12e753d19a9be46eb777454fa739f84294fe478af9f0d73aa438f6cb4e0f42747d3fd7dfe9cfda0c5273485363a7d3f206528d7dab28eaa127713230e112e46cd2cb382c829c654809d18d1c28756a1be97be358cdfb7842d46", 0xa4}, {&(0x7f0000001a80)="bbaa98e7c5fc03683b7f5da8aaabce2f0845bb69785a088ebd0b0904cb9b78a4f313ba2bc876b517e9bc4935a5158b46d8fb7d89c3d177cf195a1ad5aaed330494d50eb50ee2206dd3bc7c3aa1de6ec00d2564f3e69bc011d1a9c0a839676de6e0a624f36ec05857da91b0af4051fda7b8eb04b194aef5c85f5a6e53be3ee8b02d340af765893144e41fd3b8c7a60bd71c6031f365635e3d53cb5042a3a39d2117182e35b3b19e5a199315aa7d1f3e41e5a5d7af47c6863a0efbb8ff4fdfac172df50a06", 0xc4}], 0x3, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000000040)=0x1) fstatfs(r4, &(0x7f0000000780)=""/232) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x368, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) socket$kcm(0x10, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYRES32=r4, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESHEX=r4, @ANYRESHEX=r2], 0x28) [ 451.197907][T16836] device bridge0 entered promiscuous mode [ 451.207472][T16840] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.219081][T16840] device bridge0 left promiscuous mode [ 451.289981][T16836] device bridge0 entered promiscuous mode [ 451.408803][T16840] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.430425][T16840] device bridge0 left promiscuous mode 21:45:49 executing program 5: r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) getsockname$qrtr(r0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040), 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, 0x0, &(0x7f000034f000)) 21:45:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c02e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x42}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdf8, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:45:49 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf252000000008000100030000000c009900e70000000200000008000300", @ANYRES32=r6, @ANYBLOB="080001000400100008000100fd1e29cc08000300", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x240049c5}, 0x24000001) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8, @mcast1, 0xffffff00}, {0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0xfdc}, 0xffffffffffffffff, 0xffffffe7}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@ipv4_delroute={0x38, 0x19, 0x2, 0x70bd26, 0x25dfdbfd, {0x2, 0x20, 0x20, 0x7f, 0x0, 0x3, 0xfd, 0xa, 0x200}, [@RTA_SRC={0x8, 0x2, @local}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x21be, 0x12, 0x7}}]}, 0x38}}, 0x10) 21:45:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 21:45:49 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="c79112b50fdfc58d125596a9d758c167cd5a984c6185668f7a1b94623db7f1fe21b179eae31f4ceda589229363efcb940b81c3f9d6c0e7d4484341d6e43cab9e0af19c6495c9064dd9e29ba4c6d8f54624aa01bcbc25259bfdc64e8c6c23b942f6d2ca5e890443fe2da16c9f03eb9542273468cdb2ab041e1aba9e13dc3daf475d9b103ac80fd4306edcdf037a42f7f48547aca0544d9243c2c2b4be4b25e9f0042f33e3f0601c325ccc80492c98d503e9462d1536034fb09cb34105eb648a93a65d82f82b5c062e195670ba5d172559172cb5ed5ec98d840417b59863875358fde239411247f2e5ac2169453f9addf6b9f9853978e364b811f9e7beb4a4278a70cd53caa51d8b398d081be89e9e50ffaf841994ce", @ANYRES16, @ANYBLOB="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"], 0xa8}}, 0x200080c0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250400000008000500010000001b0004000800000038000180060004004e2100002e00000008000800c0ffffff0c000700200000001100a05ca1e2221d0e37ac0d000008000900320000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) syz_open_procfs(0xffffffffffffffff, 0x0) 21:45:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r0, &(0x7f0000000100), 0x2d) semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/137) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'team_slave_1\x00'}) sched_rr_get_interval(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)=0x80000000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x2000000d) 21:45:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4) r4 = dup2(r2, r0) write(r4, &(0x7f0000000080)="240000001e005f0214ffff0700fffff8120000000093a9630461b64b62000d0007000000", 0x24) 21:45:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x270}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) r4 = dup(r1) sendfile(r1, r4, 0x0, 0x80006) [ 452.205093][T16895] IPVS: ftp: loaded support on port[0] = 21 21:45:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpid() r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000040)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="61f2aaa422e8823ad50f051bfe82b0ef", 0x10) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) inotify_init() setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x10, &(0x7f0000b63fe4)={0xa, 0x2, 0x9839, @local}, 0x1c) ptrace$pokeuser(0x6, 0x0, 0x3, 0x6dc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) 21:45:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) 21:45:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'batadv0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x120, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0xfffffffffffffe76, 0x3, @multicast1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x2400c000}, 0x2040080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind(r2, &(0x7f0000000240)=@in6={0xa, 0x4e20, 0x8000, @mcast1, 0x1ff}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x140b, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x31b) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x8944, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x94020000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) 21:45:50 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) [ 452.652454][T16927] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 452.654673][T16927] team0: Device ipvlan1 failed to register rx_handler 21:45:50 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = accept$inet6(r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r3) r4 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) lseek(r5, 0xffffffff, 0x1) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept(r4, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000051c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x8d0}], 0x1}, 0x0) [ 452.993080][T16935] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 453.008161][T16935] team0: Device ipvlan1 failed to register rx_handler 21:45:50 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) dup(0xffffffffffffffff) getpeername$l2tp(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg(r4, &(0x7f0000000a40)={0x0, 0xffffff07, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 21:45:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) 21:45:51 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x40091}, 0x14) 21:45:51 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x58) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000400)) 21:45:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x9d0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9909e0, 0x3000000, [], @p_u16=&(0x7f0000000040)}}) socket(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)=ANY=[@ANYBLOB="06000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x10c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {}, {0x0, 0x8f, 0x6}, {0x0, 0x90, 0x80000000}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x8e, 0x3}, {0x0, 0x8f, 0x10000000000000}, {0x0, 0x90, 0x792d}}, {@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x0, 0x8e, 0x1}, {0x0, 0x8f, 0xffffffff80000001}, {0x0, 0x90, 0x2}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x8e, 0x1}, {0x0, 0x8f, 0xffffffff}}, {@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x0, 0x8e, 0x1}, {0x0, 0x8f, 0x19}, {0x0, 0x90, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000300)={0x8, 0x1, 0x1, {0x6, 0x4}, 0x1, 0xfff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x400, 0x4, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) [ 453.841480][ T3508] tipc: TX() has been purged, node left! [ 453.888593][T16965] IPVS: ftp: loaded support on port[0] = 21 21:45:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x23, 0x0, 0x0, @tick=0x5, {}, {}, @raw8={"a357b6cbb6215dd3345900"}}], 0x1c) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x4, 0x2, 0x5}, 0x3}}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x1, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0xe79}) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)={0x4}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0x0, 0x6, {{0x0, 0x9, 0x6, 0x7, 0x6d, 0x2, 0x4e4e, 0xff}}}, 0x60) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x2c}, 0x10) 21:45:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8078, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x76643) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x4000000a, 0x4) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x4, 0x2, 0x5}) r6 = dup2(r2, r3) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0, 0x400000, 0x80000000}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xedbe) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x85e7) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) [ 454.191639][T16987] IPVS: ftp: loaded support on port[0] = 21 21:45:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', 0x1000}) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x10f9a0}], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x101200, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x2) 21:45:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001032100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r0, 0x0, 0x5e, &(0x7f0000000200)="893c0e4a4c38d4ba87e9e889c6764ec115fac98cac7235000000000000000014961f00000081fe488aeed26a1f8d96d90131c1e3f412e035c9774f60c284b09271931b832c650ea26b35010000000000000000000000000000c812b20763") syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x101, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0x4) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) 21:45:52 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) [ 454.638870][T13769] usb 2-1: new high-speed USB device number 16 using dummy_hcd 21:45:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in=@remote}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@x25={0x9, @null=' \x00'}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x15, r0, 0x1, 0xf9, 0x6, @dev={[], 0x25}}, 0x14) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, 0x0) [ 454.733872][ T3088] usb 3-1: new high-speed USB device number 25 using dummy_hcd 21:45:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_ENCAP_SPORT={0xfffffee4, 0x11, 0x4e21}]}}}]}, 0x80}}, 0x0) [ 454.995504][ T3088] usb 3-1: Using ep0 maxpacket: 16 [ 455.004261][T13769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.028570][T13769] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.061556][T13769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.089378][T13769] usb 2-1: config 0 descriptor?? [ 455.128067][ T3088] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 455.161000][ T3088] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 455.186120][ T3088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.206964][ T3088] usb 3-1: config 0 descriptor?? 21:45:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x4) [ 455.255047][ T3088] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:45:53 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe7b}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004110}, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) close(r2) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x5, 0x8000, 0x1, 0x9, 0x0, 0x2}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000340)='gcB\xc6+\xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe\x9a\x80\xa0\x15\xee+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\xfb\xde\xaal\xf4\x82b?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x17\xf1\x12\xea1K\xc9\xe1\xef\xc6\xcd\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xc5\xff\x18', &(0x7f0000001980)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`\xe2qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', 0x0]) [ 455.769480][T17066] IPVS: ftp: loaded support on port[0] = 21 [ 455.925111][T13769] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 455.952864][T13769] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input20 21:45:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) close(0xffffffffffffffff) [ 456.126981][T13769] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 456.562040][T13769] usb 2-1: USB disconnect, device number 16 21:45:54 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe7b}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004110}, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) close(r2) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x5, 0x8000, 0x1, 0x9, 0x0, 0x2}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000340)='gcB\xc6+\xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe\x9a\x80\xa0\x15\xee+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\xfb\xde\xaal\xf4\x82b?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x17\xf1\x12\xea1K\xc9\xe1\xef\xc6\xcd\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xc5\xff\x18', &(0x7f0000001980)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`\xe2qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', 0x0]) 21:45:54 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = getpid() migrate_pages(r4, 0x3, &(0x7f0000000200)=0x80, &(0x7f0000000240)=0x3) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x7f, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000340)='gcB\xc6+\xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe\x9a\x80\xa0\x15\xee+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\xfb\xde\xaal\xf4\x82b?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x17\xf1\x12\xea1K\xc9\xe1\xef\xc6\xcd\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xc5\xff\x18', &(0x7f0000001980)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`\xe2qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', 0x0]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) r6 = timerfd_create(0x1, 0x0) write$binfmt_elf32(r6, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0xcd, 0x2, 0x1, 0x2, 0x4, 0x2, 0x3, 0x7f, 0x2ea, 0x38, 0x7d, 0xfff, 0x0, 0x20, 0x1, 0x5, 0x5, 0xec19}, [{0x1, 0x3, 0x2c, 0x0, 0xff, 0xffffffff, 0x8000}], "8409e0dc7e80706575e63e954df582ec4ba3c3e783c597d60e7e9c94ce477fe6a761d338c658259a2d436f92f0f92259a1b587cc46677a7e930f688396427572ea3aa0c73e5e247257a67bedeac06870335718893cc0eeefd75f4781ba7767ec7f679228784127dfe6b01a22a3016ab2a97f19593b5ebc9c29ec0e191b47152e421f3066260dc3a4e46baf86d91b4624", [[]]}, 0x1e8) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000005c0)={0x7, "eec17b9f00a71c229918dd6cdfd368c0ccb7d8ea3e30802db6415c4f1347ad0c2c44f43ee270f73eb89a6c6acf2da463a25f97ed46bcb1870eef6e0a8c63ee8dc323044bfc4c9e75420ab0dab8810d572b5d7a515f369fb8e8a070778030cea161f070e555114c5d821eb3c901d26656eecac933318eafa25921001b158bb7de5f4f5c2aa69dd122878dea01b9ab11af5dafee708a85c10555371cbbd50ba13af3eedf6577cca50cbd28dc46139d5cc17a50833d12a83811b81a01bcb1bc56cbf1daca48680e1edd98a474322f4444722aadf453907b6fd4ad2b5410ba32f12d94c4d6637037008a1b8c9a90f9a16df39979f8b6df26c3bf64a70bd1dc8aaad55483a3ec23b1208760368ebbb2a86ddaeeec51a7e5027322eff2e5ff7ac08e91f7c660f5527f913e03db9a8bff4e2c22954d3342d4afdac3dd7dc7882abe8eebb626a481713ae203092c7db33006488a7521f12e0bcf435449b7b8498144a70a2afadae53277729c5ebf0935ddc34a51acea1f74205f5296d51739ffc8c65387f09cd6d60e87d30463855f252bae043a37aa9d686f3811d28cd496213808084031e47f3c4c6d59c0ecde432b44d6713f6346c1cca7c1294809ca6d4bc6c31ffc1708cf0ca64ee120c3c4c6e201fc694849386986863bffa57aeea270ed951f2725d499ccc7974733bb0219f66866d2d4a81c83530c086202245feaca1c5eccd8"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000140)) 21:45:54 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 21:45:55 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat(r4, &(0x7f0000000100)='./file0\x00', 0x280c00, 0x14a) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c4001}, 0x20000000) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000140)={0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 457.339082][ T8173] usb 2-1: new high-speed USB device number 17 using dummy_hcd 21:45:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', 0x1000}) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x10f9a0}], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x101200, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x2) [ 457.571230][ T12] usb 3-1: USB disconnect, device number 25 [ 457.759981][ T8173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.781134][ T8173] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 457.791580][ T8173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.801445][ T8173] usb 2-1: config 0 descriptor?? 21:45:55 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) fremovexattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.impure\x00') r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x4, 0x220080) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000240)={0x1, 0x8, 0x3c}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000200)=0x5) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f0000000000)="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", 0xfc) 21:45:55 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe7b}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004110}, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) close(r2) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x5, 0x8000, 0x1, 0x9, 0x0, 0x2}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000340)='gcB\xc6+\xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe\x9a\x80\xa0\x15\xee+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\xfb\xde\xaal\xf4\x82b?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x17\xf1\x12\xea1K\xc9\xe1\xef\xc6\xcd\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xc5\xff\x18', &(0x7f0000001980)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`\xe2qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', 0x0]) 21:45:55 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x6, 0x2) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4}) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="67446698000000080000000000000000"], 0x10) 21:45:55 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) [ 458.013842][ T8173] usbhid 2-1:0.0: can't add hid device: -71 [ 458.021330][ T8173] usbhid: probe of 2-1:0.0 failed with error -71 [ 458.053737][ T12] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 458.072147][ T8173] usb 2-1: USB disconnect, device number 17 [ 458.078919][T17198] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 21:45:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x2, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {}, @ext={0xa, &(0x7f0000000100)="f0980671c37d9da141f0"}}], 0x1c) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x3, 0x4}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) r1 = dup(0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x5}) read$snddsp(0xffffffffffffffff, &(0x7f0000000300)=""/227, 0xe3) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xff) syz_open_procfs(0x0, &(0x7f0000000400)='maps\x00') [ 458.293775][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 458.317314][T17211] IPVS: ftp: loaded support on port[0] = 21 [ 458.416896][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 458.450705][ T12] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 458.478455][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.512575][ T12] usb 3-1: config 0 descriptor?? [ 458.568593][ T12] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:45:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ftruncate(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) 21:45:56 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000400)='1', 0x1) r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x7, 0x4) copy_file_range(r0, &(0x7f0000000000), r1, &(0x7f0000000040), 0x20, 0x0) 21:45:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904010001032100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r0, 0x0, 0x11, &(0x7f0000000680)="893c8aa1eeea37ba87e9e889c6764ec115") syz_usb_connect(0x5, 0xaed, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x93, 0xbe, 0x67, 0x10, 0x4505, 0x10, 0x81bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xadb, 0x4, 0x0, 0xd6, 0x10, 0x1, [{{0x9, 0x4, 0x6a, 0x67, 0xe, 0x4a, 0x89, 0x15, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x3f, 0x6e}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x3b, "08985c28"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0xce68, 0xcc}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x5, 0x3, 0x43}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x5, 0x5, 0x3, 0x94, 0x1}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x4, 0x6, [0xa, 0x9, 0x8, 0x4, 0x3, 0x6]}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x3, "997daca2e5d6"}]}, @hid_hid={0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x35e}}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x7, 0x4, 0xff}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7f, 0x95, 0x7, [@generic={0x44, 0x3, "407b9584db8eb967a0923c7b458839bef6a20f96bc44b27fef833d6fe80a0c5731d18c6dc04c0b55c1849421cc7f9f1f46b248bbafacae8277aea7abcc02578c2be2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xc2, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x20, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x101}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x1}, @generic={0x95, 0xd, "2e1873f764eb56acc695b477a1e7c24ec7ba254d571c733c4ae80154241590f6060c41a11f7530d6d22c076929d219370454a851ec87027af3859f474694da9ed1b530c1b40d59f146822089b6bd7c0ed3f95151bfc18b6d06056685aec32767d7b5a7b4c8d7ff6d067de348e53cf3b4ef3ae645262f6a762a24907b2ade903ad1dae1299556274dbe376201452e390653a1df"}]}}, {{0x9, 0x5, 0xf, 0x4, 0xc7a9445a3856f883, 0x22, 0x2, 0x76, [@generic={0xa, 0x23, "704b071300d10f0e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x6}]}}, {{0x9, 0x5, 0xf, 0x19, 0x20, 0xac, 0x20, 0x1f}}, {{0x9, 0x5, 0xf, 0x1, 0x813ca9408366cda0, 0xa0, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x3f}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x0, 0x93, 0x8, [@generic={0xa8, 0x23, "75718c3d4ac6f0fe6a8f57596df15a17e5f7d84a9879afa038e3a53b12a69c6b638831c499cd218138161253de9a8da03dd786ae0ced788dfba7c9b380829fa0729926c0331f029084e2a213f4faaa279196376b32c25cbffa414fe69b3e21ad6351f285e871332a8629f8211bc6b370efc36e6c32858a8a5c9d135b8c36f4ead0c2e2d97141e8e4b74fc7b321bd8bd543d57b8b7a5eb710442744cbcddd73b1edac8aac6d71"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xee, 0xfff}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x83, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x40, 0x1f, 0x14, [@generic={0x23, 0x22, "4dd2fd6945404f0f5df27b88a50bc4809ddb8d7b10d56106ac43e9ca6e61c450ab"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10924d6660a7f400, 0x40, 0x5, 0x1f, [@generic={0xe8, 0x5, "0d126a44c53cbf27e6639e7b1b04a4f0b8e0a9436a0de2a40e6935d62856adf7d9a97093c7dba8ab01fd82fbfed093f2e76f77a20751a9fb5e5574f50c5a48723cef48f6b47069ccb3e8bb3f3cba7eec19d2016d9ac03e35788b1440f821c5f597268aa6c0b10cb118c3d1c7a4c2a0424b8a50823328c7c7a96039bad8f55122217029ade9fed20e6295eb997232a3d1cb31cfdf1eea079680e717e14ef7154cf1a5d89c24c8389782bafde18baaa45be1c622e8e6381e3dc6332b69f375bcebabed3483170fc0817a1af2b846826151ef2545278554214a1f072cbc4eb437ec01fb66d6d176"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}]}}, {{0x9, 0x4, 0x30, 0x4, 0xd, 0x9, 0x22, 0xe4, 0x76, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e72e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xf765, 0x6, 0x4, 0xff}}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x1, 0x7}}, {{0x9, 0x5, 0xf54e15853b325315, 0x10, 0x200, 0x3c, 0x20, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4b, 0x33}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0x50, 0x5, [@generic={0xfe, 0x8, "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"}, @generic={0xf7, 0x23, "2a41d7d9c6bdbbc8cf35de3efa7d88a7168393c4e8f8e244600d528f9e5420bd78db158c24b37275ab52d6177bd92f948978ddd3a5b664f74c7c2a4595ba9b3ce377068bacfab2639d36d7a7453ce722676d705a9dc34d925f7da8006e114f5ec83fedf39531960238bfcb9327e884f5e6de5f8cd62b900fe5c8878cbd2bbaa3e8117080351420cecb492e382856fc1d86fcc6a43fca7f65f6b06988c335c078b41cb2c5df573de416963106176d2ed6faea78772235dd8ce5430a86d49b3ef4a0a5283887dcb8ef0fa926ae525d5561d2e002e75ed38f414305def7caf7c037ab53fdec73ddd2abeaeae2f639758dcda3b1d35e6c"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0xc0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x9}, @generic={0x77, 0x21, "dfccf69f34e999801dc07c42a3849fd6225cef26e3b063e5dd3612ff78e62ae9d3001e77052e19efd1b874cb87572dd233d17164a04732122ffaad694f6be0b7c023b0e6839518493252906e083f7f35282742898cffeaa958111941ca657df5d811639698c7c05459b5239c49c26f036ca7a08007"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x3f, 0x35, 0x20, [@generic={0x28, 0x11, "c36f0d4c1a5bf064f0916a2124ea0d885002907e2c0aa515cddd417ea2ba56aa7ef4b116f08f"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x5e, 0x81, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x91, 0x101}, @generic={0xff, 0x23, "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"}]}}, {{0x9, 0x5, 0xc, 0x12, 0x48, 0x4d, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x91, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x6, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x1, 0x7f, 0x5, [@generic={0x9d, 0xa, "55a17c39cf1a024639ceb859424e850f5571bc765f64c5795975336f2340023729ad1472a1b5d4bbe2aa307b1efaa740ef21a52709aaa795a9f79690b3434bd87c85f6f0cf2a790ff29f0688f4ba224c4723fd370fdab4309e47bea45330dced57d71f74edef011c5fe88190b145be6b435233e0af0afaadefd2bf7ee993e0e1b7cf13c6e870f9bccabb7989b8b034e04bc217913d200643cb3687"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x76, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x20, 0x3}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x9d, 0x5, 0x4}}]}}, {{0x9, 0x4, 0x4, 0x6, 0x1, 0x7c, 0xb0, 0xa3, 0x3, [], [{{0x9, 0x5, 0xb, 0x10, 0x208, 0x0, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}]}}, {{0x9, 0x4, 0x59, 0x5, 0x9, 0x97, 0x12, 0x6f, 0x6, [@generic={0x64, 0x22, "9ddf06fa3f62eb6d7c6ad77e80f518bb9f632739bcf9dba670f06eff9064cb7419fe64204a6783d6fa74d65d742d39ef5d775d9dbfe7581f84ab7b44131b15c588def3e70d8f254f2debd54d9aed139ea80809160f74618a8169088a62fee3cd321f"}], [{{0x9, 0x5, 0x7, 0x1, 0x8, 0x1, 0x3f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}, @generic={0x3d, 0x5, "734eb86d48baf07e5d6109d9c3e57f0f7c54d0313325b44ac00a9112d392f03d6ca24e6b339b9f3ca784ccaffd90903ff2d58fa5ddc804c40c5da3"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x9, 0x1, 0x8, [@generic={0xe, 0xd, "d7d9df0622d9bfb8e5be7e6c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe1, 0x228}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8e, 0xf9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x6}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x0, 0xf9}}, {{0x9, 0x5, 0xd, 0xc, 0x640, 0x8, 0x7f, 0x6}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x5, 0x76, 0x1a, [@generic={0x4, 0x9, "55f1"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0xa0f}]}}, {{0x9, 0x5, 0x0, 0x8, 0x0, 0x8, 0x94, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x3f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x20, 0x3, 0x80, [@generic={0xc4, 0xd, "e687d746d1359c4a4a580159468ae624ccee2949861049c3783fc403afe3314c5000ff9266e49f429c3e655aed47f6c032b3d64f4940815c4dbba2e9c59ebb998caa75dd5bae68daa716bc0389e7a8e07f5e6fe01b83a727704e962a6577abdbfc6c52aeeb111a641f0017c59bbd9278e6c8deadcaeffe0609821b19d744c89662fad2698ec07b8c5d08dc2ded246d4e57c89223bc8672c71456765af02eeac5d6a3e09d97270d7c642d9e32b3521865a86f7b528da3208998d7d31f17b7a96d4e37"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0xcc, 0xea}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x8, 0x1f, 0x74, 0x40, 0x1f}, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="050f1100011a100a81a000000000ff010023956197efea429c8169d5b1d7abd151ed1b915f4c1b922dd006d31fbd502ffd7f564381dcf2a80ec8ceb98e1864b9114639c61c79c4f5bc7e5dcb73b330f89628a28ad03748bbd7b9a565f60e384a3342f409212d743dcbf570"], 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x458}}]}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x5, 0x90, &(0x7f0000001500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x3, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ' '}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1ff, 0x1, 0x83}, {0x6, 0x24, 0x1a, 0xd7e, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x88, 0x20, 0x5, 0x1000, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0xb7, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x28, 0xae, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x6, 0x3f}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x3, 0x2, 0x4, 0x8, 0x3}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0107000000140008007465616d5f736c6176655f30000000006d8d041da229c0a6e3b09a93c016af2da21886bdca0cb15ca7609bb4b03a6fc75dde08995897c5284864564e6621f617b12c872ea5334445a3074ca4ce2602c86417371dff6582dfaed22cee5fe48862fcf3956dcf8845ef9f6a81bfa878dfd5b74982db724ea9a320fb8884edff752b9f5f5e20ac214b437dbc72cddea89b45bc042b2a4fdad278f004841648ffb93ad0313479dff4e4acc4a6fc140f7b82da7474ed4fb8d4e1f4f97f0000"], 0x28}, 0x1, 0x0, 0x0, 0x4095}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x58}}, 0x800) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x30040a8}, 0xc, &(0x7f00000013c0)={&(0x7f0000000840)={0x28, 0x140b, 0x400, 0x2, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002000}, 0x1) syz_usb_disconnect(r2) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 21:45:56 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x265) [ 459.037559][T17237] IPVS: ftp: loaded support on port[0] = 21 21:45:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r2) keyctl$search(0xa, r1, &(0x7f0000000100)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0007041dfffd946f610500020000e8fe02080100010800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 459.326801][T17196] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.388180][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:57 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={0x9, 0x4, 0x9, 0x2, 0x8}) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000041c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x20000049) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x22) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/239, 0xef}, {&(0x7f00000000c0)=""/56, 0x38}], 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x102f) dup3(r0, 0xffffffffffffffff, 0x0) [ 459.775884][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 459.843267][T17196] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:45:58 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 21:45:58 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x265) [ 460.669019][ T8092] usb 3-1: USB disconnect, device number 26 21:45:58 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40000, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='wg1\x00') r3 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0xcc272, 0xffffffffffffffff, 0x400000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 21:45:58 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x6, 0x2) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4}) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="67446698000000080000000000000000"], 0x10) 21:45:58 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000180)={{0x0, 0x1, 0x2}}) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) ioctl$KDDELIO(r2, 0x541b, 0x203fffdd) ioctl$CHAR_RAW_PG(r2, 0x1269, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000340)='./file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f0000001600)=""/200, 0xc8}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/192, 0xc0}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6, &(0x7f0000001500)=""/167, 0xa7}, 0x21) creat(&(0x7f0000000400)='./file0\x00', 0x0) [ 461.102332][T17316] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:45:58 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x2866}, 0x0, 0xc, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 21:45:59 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 21:45:59 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 21:45:59 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000025c0)=""/57, 0x39) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="9f9964823517c0d94611a1b55efb038d975ff46a3f0befe1de46c94f00e461083be4996070fa254c72add365dc41"], 0x1a0) fallocate(r0, 0x100000003, 0x576, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x4, 0x9, 0x8, 0x2, 0x10, "0369b439d8ca531ba77d624d05958425012b3b"}) 21:45:59 executing program 0: r0 = socket(0x25, 0x4, 0x3) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x6, 0x4) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @empty, 0x4}}, 0x24) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3a000000f3d1cab4c5f48e6c8b0a34663e104cd07a1ee7aaef3eca25dd558c3e6df3a06a53ba7aaeb8e2c9e68e43ee9dc62352b59ce64c4b678c161c3048b7aae3cddbe50e33cd201f9712163812d86db5f6c20fd9df3a13b8b1378615295583968be6f4211adf399462caca3a4d0657e7b164fff6072bfeb8842389604d5a14e09e1e8dc285f4cbcfe5dc6debe1d607b0fc5f4fdbd73324cf62f04981cbc54ed4b04e0610c01f72371c9e4b5757b401fb089e0ce8289c83b006e327ab2ecd1a735da7dc839f507f97e6232a888f6894e2a0ca7d2dcaabedc8b45da8f3bf78f0eb722d3ce0a0", @ANYRES16=r5, @ANYBLOB="040027bd700000000000020000000c00060002000000000000000c00020002000000000000000c00020004000000000000"], 0x38}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40448c0}, 0x4050) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000780)=ANY=[@ANYBLOB="85706ee0e1d1ba32e13b41f23b068835fc18"], 0x2) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0xfffffd6d) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x5, @loopback}], 0x1c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000600)="8ed5c8343b5006e7db8c41eea3e49774931b09101f8a52e63f9bbeeaba863bd0ce41cd92cc818f349da0f4b984c3aa7711707462ceda4d217a5412e87930caea217f7c444d574f63f89e109e7751a02065f3bdea4791c8276fc029b0390fa0f4dddb12d16487b3e84a0782030a9567d4dea8b593b8611b859fcb5fdbd93e6d5069acc52ff28f382b6a20db1bfc7b7a41901067ae4601459c569b73a06e27eafc5f35234390a278ffb7fe3e3259ff6aabaf729363f30fd5a980bcd83fd48004d76068d8ef466814efa26d990c098e14fffbc4ee30d9", 0xd5, 0x4001, &(0x7f0000000700)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x40000000000037b, 0xff48) 21:45:59 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_opts(r0, 0x29, 0x3c54985abd53ce2a, &(0x7f0000000080)=ANY=[], 0x28) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000140)={0xd, 0x1}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0x1, 0xffffffff}) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0x4, 0x0, [], {0x0, @bt={0x4, 0x3, 0x1, 0x1, 0x8, 0x4, 0x7c46, 0x4, 0x80, 0x0, 0x2, 0x80000000, 0x0, 0x4ed5, 0x16, 0x4, {0x9, 0x1}, 0x7, 0x35}}}) syslog(0x3, &(0x7f0000000000)=""/15, 0xf) 21:45:59 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x265) 21:45:59 executing program 4: accept$inet(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)=0xc0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x0, 0x5, 0x0, 0x8, 0x0, 0x41c5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x18, 0x0, 0x7fff, 0x1, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000140)=0x1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000b0f000000000000004b0000003887964b7cc01c00", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000000c0002000800040000000000"], 0x3c}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:45:59 executing program 2: socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x4e20, 0x0, @local}, r1, 0x3}}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'dummy0\x00', 0x1}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "204b9e1804d636301150775298e6490040d0ecb72371cfe0ccc258d2b4450458b909ae785f60b932863937ed25df0ce2b046ccc47e3501ed7a53e69d95dfb761f3fb81659983876f915b21b4b91270b4607875b751136514bb42b1de575e5ae05e98fd37dde49acb6a8e7f7c592ceb8793d00c84515e9b091fca8056f69ef47c1c91735af04b3077a94a24147489c6bbc3d63a76ba4eb1e6adf014106f4b0117fc6a2b2c84ca9e6c40fade373fd49f657e5e828399868d39d2a9d8cb3f4508e156d31ded826a64d84b19ceb0c13d9566f14866028f00408428bc6b9a27761fb13e70561fa8bb45bf2547baeebd7c99e01c1ebdac09ba75e3f67b2bc6898ca2c8e6c2b09efef1e688c74fe8e214b657d3325725531f9ce71d59532adc69f40e0b821fbd14558133f9fcd9d5ace9150703b5879f74028583dccd4984a9fedf23f1f6b8c501f9a99762079404f109e6d69b025edbf2d3169e44f186eb60e7abf9539cb8013670435420f54b7e485644f5afc2d0581d8404c23bcf2c0bcd6d3a6fbc658721e74546ea52d57f259e841e87f01ace9d7fb10bb4356abffa306d91963914bc144e486f78c048aafe20eae27ff53250de7bed8c4167780c53facfd741b93f53d67a60eba1527701896bcd29a6cc20b9390582421eb0e5dce7a66a94881904dd91c47c59e8b7219adae86ba78b230306829368a56dc908245fc72886c3b18facea659b27466d3c6a85b541f20a012660319f8f4ba0faf0d83d28ac63ae417323a0f75b88235d1a60a29c41f662b34ac40ac19c94f227567860a998f5e4d8f65b930c1a1209ba04cc2406599914e8ed7c98d8095a56fd29920c47c6221bf7e6a076dfc90947af9468d8844731ac3923896f25a8402421e24e1d328e5b9daeb97048b87e3d374874071931ad791c1f03324ba01d463364a5bb1dba7e3b807aec9c333703397a45918c73b443dd46f7b289736662ad833302fa89567e44c3de8e2f87bb5f8758abf6f888ad26bb5ed48a4bd828d8fcf5c01cf7588009c1a6c35e94142950b3bac8fa0af15c2f30504cef3e544b132e4096a836aa49336cbe878d2e33075d0712adc3e75b9f9bc7ec420f123084eb296119171535c4fa49d460d4444eb309f424ec13be89ff6641caa089da262ff89c0d4b1a86fac91361a7a124a0e4b27de253186e10671d2532d600f6b4089dc690f600363092ad93fb62fbab9e1a96caefe31e4c117420fd1df64e4e0cf4967cb026a003be444278553c2e58e19ec5a6db3921fab8fa0748965e523659e54a3e01190492f9b01811d06b13d8c833454ab5a93af8a9ad27a155d682d8c78f074da17d6ccb7ded5b5f3c30e3afb3c0e4aab6ce797e8142df9a74f486aee74c0bc021c227d802c5f5e79678c45bac331d6ec24ecb404296dc9e90b2c191fc14c53505e92587f43a5eedc56a6408048d9dbb8bee8840a656952cb361f0d76baa20939e6e8ab917e12b76dd812b95e68c90708d7cd81aa18002eea116f4190e49d1f628a509c8fb65f393ef5bcf7d1b9ea289e0532ee5f46e65709e84aaa7a6334c58eaab5c3cced88fa3e9e365ace119a3c40dfe336abbe6d3a09dfd895cdc3daae26ae9d3f68a3a2184ac5f6972ef034f1f9f0d4100a55b8638db0986f362a23b599903909a5a6193fc2c6e54adc965ff5d48bc1ed1b6ff0ab226b9598f70a13ca0a0b2d2cc05f17449bd4cbd224fa75810955011d5a401348c0b75546c1fd86824ced7b0c79cb4d13a3722aef6f7a0cb49f76a372ff133736f04b67bf6a74d5164a227f4865dfd15181e0a9e5dc53317ffb04a7ab1fba87d3b34bd1cee7c6aef4b3ebef183c9fcd4daf091ef1f5f2709a7eb4a648242c408e7d5b10b766e0f648c654d99d0722189c4956474892e379a84b1f09f13ba589423e43b4b0dd267b1d0c976fb64903ea2d22e2612d9dbad91536a986f44986d74578f2cf378dc6505cc26261548a080e11d74fed2cdaa90479f0656fd927f89a0624f4ce943981ffbec2ceb27c7fb6e6ee7df7c2d26d7151f1dadb172a0017787c5d32d6408b6662c8f5348f34e63649206142164f7aa076b2c83bfffe44126ee923f0b9bc917e52308373553cf19e6798ac83ace350be47f445ef0d268c2a4fc67998a5907db42decc63fcfc30df0a4543da178e442aec97060edc209e34849f6beea0e366eccc80b87c1c16f89e5608b96c176ccfaf6014a619b83d72c5a89749cf763fd76c6ae82b6a1322674838ab9e5f9a0db7aa8b7d27db308edb664fc0197756f6709df36d9f6ed678944e18455a8d49434f9a6f223cbf52b6a1ba266a55331ffe7e83fb4130c2f5528626c4e451d8bac1da046dd59249fe41b6c8a36e82346918e0177c876f44101ff9f7721d8fbe1eca04e13ba8db3f5bd01c3661df0d6c8a24d45a246e0ac80aed4178901a71a939da4622592b3a8d87b3ae35370530039d7d413455e9d61656b58a1e63aa9bf1a87d8bcc6605c3167836f82ba01f54934e2d31d7463e1848ee8a2cca55a029d5ed37236dda9f278981cdb330eabc6bfc33a7fee5678c38b8e0a9258fa8ce5cb8abc3320d44dd16098df1bbf9d3e3142ec1838ba81785e37dc97fda2797e3cf6b7d6c367737b4df96a242149bbba7af54da91b404fbf01f4ecfb7ebd97c67de2415b3bca3b5f21deae988733dcb547a17aa38c0b98aba60fbb1d57f9e8f005ae6233e5da68da32c7a2778944a2eacba03e3312fe968fa3be0e2ceb4d8526803e7a8f24618b1003860e424da518c9602cb092c9c6b930b72523bbf615ad8330e337e64ff82eb78d9a2384e86afece8aa9d9cb1b7ab27265261a3cf542e1655792ed66b28d27bf4f02d13e93413bfc5fae7dbec15aac85331ae3d4032679988ffd1c1750447f763ebc9ba8f8ba4521b74563af6ee8a996af3707dd03118c3f0d18d612a5105519310f7b8c5eb4b7e3a0d675374da18314d144b5d5d0ba2735dab4efdf68f70285ce4d35032427e23fe7c59c5844879550417dc93d2221fe0ff82c7e21ebba19c01fefc6f6eeb7078e7557f077ca089246e6f3901e127ca4685c191847ae720ce30d41939239b2835d9cfd126faabc88eb80d409d8ec1cdf6cc0c55109bdbbb668fd56c6ebd3503986cdf5ade19903a85516f0ed87872f397e6244b0f58c70b8dd0cbc408dd7a87c42d672d31fde7fbc31b3acff4be744b933ec0645f76b52481ba6f50a25a98f89d9989e347b682a459eb38004d0de0a7314f8319b1e0ce5152a4928d7f59769347a7f48af595d028b5012cf5b7fc081cbec3c5ad30801947b5d3f87a242b05691ef3f46f0ba35fa6ee28a966ad42e34ef6192cb6e5de41411df4638c825688abc1c8f1fa7b2eced5ae40a5d35d7cfd981f4dd46a91e8f123187d8e99a947020cdc4cfcb66ee004232ed5badfa694fd943ed59f01433989e5663a77fd2bbcdbfaad5ab482150f22ffa6b1ae9e99134b320c04444c3d5d71e37c6d4faf82b1297d75a520e6e6c5a0d7ab86dea5245a97b16a7690f50e9abd452da33c58974cb63e4711fece83cf1251c6eecc7c9a887b0a881f148b6c8fa3749ef09661488909a2f74e41a4968f5f1d1ebd9a511f5732ea60a18032d68dcf34a5914b1c24275e6c3d331a8c454e4c615dc5f6ce4de1b44fc755da73eef517bca08fa464443eabf4046961625ee82c406e08359b49785a1cbe9822cada3375da9adf55bd50e156a314f10107a3fb880a944fa3a0cdb4be2234c19ab26f8075c6389a0a6062e82050b493a30e617f728b8d0ced0b69da60c6fdadd95ee1c0e656b63ecc72a491e07bce4c3df3761e51bb327a86d55a375e4f5859a8b179a47f4b5b8b85fed0db916e31885d0ad185d6c7e79449e282a5d10a7cf86d0305a2673cd9aa834d130fcb1098c0f69771ae23e2b49cdd3d39be17fcc309a282486bf0e0829a0805a036b0b1e357f03a861857312dab3033f00957ff6f03a35240724bc6adf429090f555aca563ffb5e4b67c75486149f2495971bf653617f29e50d59da32288afeabc768787d2e830c70d5f0dbd8db5e9923b8893f32c4cdc0d8130caefade59d7f5e270f8b5487b69815dd8cec6d3dfa3ca308987f2970ab3e8714cdbae27dc22fa434805c9284b904840a92bc76490c15c6a04df137940d48f7ac6285f858611376f447ebaf11ce4014066d57e5fa579b588e0d795fb0322d1b8606faf9507092be3e320184a5324df47792e8b015ee27ace73b0bc05f3eff2c2a9ee45752df32a85b1ad5679aedbe40ac59511938929e210a409e538c139d1fb93891d2b9908f915b9c556788bb8926b6a96923038a119eb68bcb528a42e97f8fbd49e7d5bb3e51987cca590ea8a18e049f64d8c994d63a707c441e63509f909adf5f7c26d36714bd56307513003f8f85f20c8fea4248627d2f19891baef9b134a8ecb6e3da6232c5b818d7469645038312b6b952f782f28ccd199367a51f750927e5f11ef04cb299dc7ba0c24500134d3a9a0a4f62903ae930f5ba49c39855ffc4aba6cc9d400075f094875db9ebcbcbb35309421d08a928b0216dcbbf718761b01b4d41cf55b0b2bf4c89603a61e5ac2f5bf5236d4bee90617e1b2fdc3a4540db2c89561c1cb9b1e28436013546e654e36fa328097ce8a4baf5a2fd78f9bca617bd4de062dbbc38c7356232b385823b6c604a401f43f5864111eff29045c12b6c622182e097caa5a9945133375b46dc0e268e860dd58b62403c41393f02c7f1d23a1d0daad5d2eb7a085387ea6b81ceb6191d5ffa7f58848996caad4796ee8d9e1bad072455a37d8b64888cb4007f344783afca22db07a2ccb8531c6a9d69bffdf1f949e3fce89f223119595c5b9bfa51893ff36849be61ff02939360a5d5b0e05d22aa3a1f16c27103edeb00c0f763bd4251805ec8d894692cd1636b4b1c96ab613896c17b2fb8a414a91463d54f145e1d49378e726e5921d8cd34aeb176a36701c9b75311806efcf402d4345034d7fd5165857bd2cd07b32a18334a3cf358dadbc8144b806120805a07714d8d0029fe0db7958bbb69b9a216e5945fdf0b892665c0bad2cd822797d5c7223094cd54042c781fba9d7f05a169f390225385d5c055896dc8a620a637a7c73ee77fbf2152fb62af9bcbe01389dd846724fa24ca6088d2bddf9bcae4d9e11f86266e4d87f6b11f3721c30c3f48ddfecb7623802c7e3f595b088473747d25b70bbdf8920924c6bb9e202e6d54e340a469e8ecf66b49dda0036a7d071492742593c2e02bd7bd703774f2ac8c45dbfa1f8ce4c205a05064362bf2819e80bd406367a86ece3f5d54b43029b3f7fcc2378c5e33e8de66fa5f3c4974310c3ac4d2ab1234b1fea14d71512c578dfab154a74dc66c8a5ff983a41e02c57c58cd9c3a77d22f15f8a6abe41de51ce4a92151ee25c6f2c4feb0453b4f86fb4c7e19063b871ff6458b2ad51b992df6b16de3a5a2f5935c85d5a8709d82943c645f6199e76b38d718b86945638d92daa15aeb9beaa53028a425c6ee90dbd58b57f4a748ec0037fca725812aaac8e201d5121c06c9d3bfcbe799b9fa28440fceec78a5d39a112626bd0f9e530cb5573083e6b3b0ce5ef60e85ea643331d45663f309d75d36c88ed56abbac74672daa72c2f180ab5d117d2ab17db9e36a807bcaa62a07aa5486d39d63f64d23f03e58f6fa346b39005cde05121ecc2146ae982d02532a2deb90d8b9cfd32ff03a5294933292fb3d58760bc81a72df0e602b9b4b7e407bc542924e9763fe0d4bd5346ccb9e10b1ea7dade31d4bbc9"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, 0x0, 0x22333f22467161e1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003600), 0x0, 0x0, 0x0) [ 462.065802][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.097058][ T27] audit: type=1804 audit(1597441559.882:49): pid=17354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/187/file0/bus" dev="sda1" ino=15777 res=1 errno=0 21:46:00 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ttyprintk\x00', 0x48080, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x178, 0x20f, 0x200, 0x178, 0x0, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x7fffffe, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x7}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="84ec0000", @ANYRES16=r4, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x48014}, 0x80) [ 462.782294][T17385] Cannot find add_set index 0 as target [ 462.817917][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:46:00 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0x265) [ 462.873686][ T27] audit: type=1804 audit(1597441560.652:50): pid=17354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/187/file0/file0/bus" dev="sda1" ino=15778 res=1 errno=0 21:46:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4d, 0x2}, @cond}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000200000040b30405314000010203010902240001010340800904000601030102010921ff0f400122020309058103ff032006056d16465f926eace427d2513c10ac492967cfe7d80110d0af09312089c8d05997f52d91cadf917de4f140f047b0a9fc32f6cd129d2b3e604456d4e266630c2775eda7e6bd0d408ff95ffb1785ca31233de9fa8a2f95436bec197277dca783f60bb1624df9557678b76a7cd7e893062aeac7300d73b3070b05"], &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1, 0x8, 0x1, 0x40, 0x3}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc1a}}, {0x5e, &(0x7f00000001c0)=@string={0x5e, 0x3, "82f6e367aa4860f829062f0605ec2dd8b6065026e8048cf9b91d6f6b09c3d295b0284338941643e1e35a09a0953e2289b4a25bc10844f694b7c2e43f803041f3867f2c00c66759e0e41a50330367899ebd0a285de7b50d7974ccfcb1"}}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000280)={{0x2, 0x4e24, @multicast1}, {0x1, @random="dc9beefa83e3"}, 0x40, {0x2, 0x4e22, @broadcast}, 'veth0_to_bridge\x00'}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', r3}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2404404c}, 0x24000004) [ 462.934888][T17397] Cannot find add_set index 0 as target 21:46:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x2}}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) 21:46:00 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x2, 0xe0023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x8380, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000040)={&(0x7f00000004c0)="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", 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000002c0)="0fae0566b8010000000f01c1b814010f00d80f08bad00466b87b00000066eff031938b000fc719b8b0000f00d8b86f000f00d0b832010f00d8"}], 0x1, 0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$kcm(0xa, 0x4, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x0, 0x80fe) 21:46:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getpgid(0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd700c003907000000000000ffff000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$team(0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x4d, 0x0, 0x1, 0x0, 0x0, 0x24000055}, 0x4008004) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="b27b44036c43540fbf56c818e4ff3b36193b3561c91ffb5cc91c33d7d8371e96dab90d231a1f4953e1b6dc56f226c957ce631d7d0f99a642d82da441e112b25e8b7ef4ea", @ANYBLOB="d6c6e8c868740fea6296aa52658e8bdee054458fc08f3a2d539f492444ae8aff00df5b83359893caa0f80265fb86f909db0098fb1bdc13573daf0e916f41ae85d1f7329894a91fddecd84ffcf1723f00d7b5b7a25e6ea3c081bef283d3ddf59e0b44025a1d6279d9eff76eedda5b6b325ba35a2e15ada4bdd1ae4627035bf88313fec173c36656c8ae77d9477a944473db"], 0x44}}, 0x140) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x0, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 463.094889][T17408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 463.142420][T17408] team0: Port device veth9 added [ 463.284917][T13769] usb 2-1: new full-speed USB device number 18 using dummy_hcd 21:46:01 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}}, 0xb8}}, 0x0) [ 463.572790][T17421] team0: Port device veth9 removed 21:46:01 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5ba6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000ee0000007548f4ff0000000018280000", @ANYRES32, @ANYBLOB="000000000000000041000000fcffffff85000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x9c, &(0x7f0000000280)=""/156, 0x41000, 0x4, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, 0x0}, 0x78) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x28, 0x3, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xadde7defcbae0692, 0x9e6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4040810) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xc004402, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050768f000000200000000000012", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000d0000000a00050014"], 0x48}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x100040, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000003c0)) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x8011, 0xffffffffffffffff, 0x82000000) tee(r0, r1, 0x1, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e22, @local}}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 463.653920][T13769] usb 2-1: not running at top speed; connect to a high speed hub 21:46:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x1010, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) [ 463.754800][T13769] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 463.787536][T13769] usb 2-1: config 1 interface 0 has no altsetting 0 21:46:01 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0x265) 21:46:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000361000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000140)=0x1, 0x6, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xdda, 0x40000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000100)={0xb281, 0x11, [{0x3, 0x1}, {0x5}, {0xc, 0x1}, {0xd, 0x1}, {0xa}, {0x6}, {0x7, 0x1}, {0xa}, {0xb, 0x1}, {0xc, 0x1}, {0x8, 0x1}, {0xd}, {0xc, 0x1}, {0x8, 0x1}, {0x7}, {0x9, 0x1}, {0x7, 0x1}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f00000ad000/0x3000)=nil, &(0x7f00003da000/0x4000)=nil, &(0x7f0000128000/0x2000)=nil, &(0x7f000044e000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00004b4000/0x4000)=nil, &(0x7f0000763000/0x3000)=nil, &(0x7f00009f7000/0x3000)=nil, &(0x7f0000d8b000/0x2000)=nil, &(0x7f00007a0000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="1ada148735f1e38c69e8679d717c9fef940bab14cecc", 0x16, r0}, 0x68) 21:46:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x240000, 0x108) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x1000, 0xd}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYRES64=r2], 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) [ 464.012721][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 464.022237][T13769] usb 2-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.40 [ 464.022256][T13769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.022269][T13769] usb 2-1: Product: syz [ 464.022286][T13769] usb 2-1: Manufacturer: 柣䢪ةدڶ♐Ө歷ᶹ歯쌉闒⢰㡃ᚔ嫣ꀉ㺕褢ꊴ셛䐈银슷㿤む羆,柆᫤㍐會麉ઽ崨뗧礍챴뇼 [ 464.022299][T13769] usb 2-1: SerialNumber: syz [ 464.063943][T17403] raw-gadget gadget: fail, usb_ep_enable returned -22 21:46:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x10132) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x1ff, 0x98b, 0x1000}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0) 21:46:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0)=0x80, 0x8) sendto$inet(r0, &(0x7f00000012c0)="0c268a9260ac5df65ac618ded822b3f1e0b02bd67aa03059bbecc7a95425a4a07e7580447511bf746bec66ba00"/65, 0x41, 0x248c1a, 0x0, 0x0) [ 464.341006][T17484] tipc: Started in network mode [ 464.345964][T17484] tipc: Own node identity 7f, cluster identity 4711 [ 464.352537][T17484] tipc: 32-bit node address hash set to 7f [ 464.653537][T13769] usbhid 2-1:1.0: can't add hid device: -71 [ 464.660952][T13769] usbhid: probe of 2-1:1.0 failed with error -71 [ 464.674194][T13769] usb 2-1: USB disconnect, device number 18 [ 465.183493][T13769] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 465.535995][T13769] usb 2-1: not running at top speed; connect to a high speed hub [ 465.633618][T13769] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 465.644576][T13769] usb 2-1: config 1 interface 0 has no altsetting 0 [ 465.823488][T13769] usb 2-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.40 [ 465.832536][T13769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.840846][T13769] usb 2-1: Product: syz [ 465.845356][T13769] usb 2-1: Manufacturer: 柣䢪ةدڶ♐Ө歷ᶹ歯쌉闒⢰㡃ᚔ嫣ꀉ㺕褢ꊴ셛䐈银슷㿤む羆,柆᫤㍐會麉ઽ崨뗧礍챴뇼 [ 465.861389][T13769] usb 2-1: SerialNumber: syz [ 465.889824][T17487] raw-gadget gadget: fail, usb_ep_enable returned -22 21:46:03 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) r4 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r6, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) process_vm_writev(r1, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 21:46:03 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = memfd_create(&(0x7f00000000c0)=')\xb2\xb6W|\x99\xe1\xff\'\xa7I\x8a\x1c\x06p\xbb\x9d\x0e\x97\xcb\x06\x8b\xc6\f\x15P\x80\xe0\xd9\x93\xa2\xef\xf0\x88\x1bwH\xd2>#-\x0ePU\xba\x19G\x97\xd9\xa8\x9b\xcbc\xdb\\\xefTW\xed\xa7\x0f\x19\xc3\x8d\x16\xfa\x11w\xf8wV\xa4@\xaf6!-\x9dMN*\x90\x18H\xee\xbc-\xa8/\xd7%\xd7qA\f\xf0\xd0\xa9\xf9\xd4\xa4\xd2\xca\xde\a\x87\x1e\x16\x91\xd4\xb93L\xad\xbb\xc9\x9f\x9f\xc4\xdc\"*:~\b/\xcbl', 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="080806020003"], 0x6) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x12) sendfile(r1, r2, &(0x7f0000000000), 0x7fffffffffffffff) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000180)) 21:46:03 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x100, {{0x2, 0x4e22, @broadcast}}}, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18}, 0x20) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) 21:46:03 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0x265) 21:46:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x124, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x109, 0x0, 0x0, 0x1, [@typed={0xc, 0x6f, 0x0, 0x0, @binary="83c8bba360e8e854"}, @generic="5db7552c03a44e7de2f4f84992ff388b83a2180c3127f5fda89020592c0827f1e4d17e12716a4dc28259fa6433ca9fe1b7c0e42f2bdd19ce87bd2f95b01b5e7d38dacde08a5c6a64f1a1f2e36d7aba95adfac67b9bbc542bed7dbb8a409cd8d985defde6e453b3f3cfb500bb13064f2cfbe72e217a26fe82ee0b6b7843df95802924ac02285df4b2089cca8284097e016ebcefffd48c16f67e7f8de997e51ac85f189b314358322ad76a8a0f12d51381737679270279182b3d8ff7b5fb89e44acad2207e015b1f9b88eedbf4afb411c10e16b8d5e1e8b4324eff89c032b33f1eea48ac04d5d8529e889c756d6e4d38d1b9c2025be4fe5057a4"]}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x124}], 0x1, 0x0, 0x0, 0x50}, 0x0) 21:46:03 executing program 0: syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r0, 0x0, 0x4cc4677e) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x404000, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x9200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x20020000, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)="19fd117d883672b87f9edb09f31e67898883f64dc5f6cb148e304ec0c7e43f04265ecd664c05e560c2cd85bc2f8397ab85a375beae902b89258e90e74147d41a188c0f75be34be446c61a6c7b8b5a85de71f3c51ba7f19817a998a49f750d2b04b45dbea68b9ae1cb4971602", 0x6c}, {&(0x7f0000000140)="ced418f22c65d9c558c3d7f6848bb02d8abb9c22023976d8f53bef2c0b79c608dba4a8ab75d586dcdbc1671503ad10b557753c52e20fbc99f3078381f6d030bc84ce390852787b09a2ad65dc5dc8c3ab170815", 0x53}, {&(0x7f0000000740)}, {&(0x7f0000000400)="30f0bae832e44c5f176f6765731bc6eb2ce256534aaa92aaec43b06fcfa43a5ec93d3f70ed075395b62fa7c9e6f0fc7918dd26e01b64ea48e94e4a6c3d358dcfe5e14d1fa422f9f3ec3d34c176546fe0123242b37c06d0ea8ec0290d9ec8c012003c8b4ddbacf68f665d4d337fe2a4e36683e7702b647b3dad2320b1c82991c491dcadea5cb3314b1087e63fea", 0x8d}, {&(0x7f00000004c0)="85519476327d919d483b88a36b1237bb69e46c16c36aec9b654443a9f52eb180a2296d8ab39d59806b3e9e1ea8b0ac22f5568510f9f532420500f006f6f73d121830efcd99d4d9d8d1de9e276591", 0x4e}], 0x5) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttynull\x00', 0x456501, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000001c0)={0xe04d, 0x3, "f1f0c58d6106f13c7b42d499d89f692e4342bcea6793c77bd4547a04b88c89eb", 0x5fb, 0x7, 0x40000000, 0x5, 0x100}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2}, 0x0) [ 466.075206][T17517] IPVS: ftp: loaded support on port[0] = 21 21:46:04 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r4, 0x0, 0x25, &(0x7f0000000040)=""/178, &(0x7f0000000100)=0xb2) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) r5 = open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x9000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x9, 0x6, 0xcf, 0xf099, 'syz0\x00'}, 0x1, [0x8, 0x9, 0x74cc, 0x100000000, 0x7, 0x2, 0x7, 0x4, 0x101, 0x9, 0x401, 0xfffffffffffffe00, 0x3, 0x7, 0x50bc, 0x8, 0xff, 0x3ff, 0x9, 0x26a, 0x6, 0x6, 0x7, 0x100000000, 0x81, 0x9, 0xfff, 0x4, 0x1, 0x10000, 0xfff, 0xa9, 0xffffffffffffa100, 0x1f, 0xffff, 0x6, 0xaaa, 0x101, 0x200, 0x100, 0x400, 0x4c, 0xffffffff, 0x60, 0x40, 0x7, 0x501, 0x81, 0x3, 0x7, 0x101, 0x52d, 0x7, 0x0, 0x3, 0x0, 0xa59, 0x3, 0x1ff, 0x4, 0x5, 0x6, 0x0, 0x9, 0x0, 0x4, 0x9, 0xe000000000, 0x1, 0xff, 0x8, 0xfc15, 0x3, 0x800, 0x2e59, 0x2, 0x7ff, 0x8, 0x6, 0x30000, 0x4b2, 0x8, 0x3, 0xa8b6, 0x9f94, 0xc1, 0xffffffff80000000, 0x6, 0x7, 0x8, 0x2, 0xfff, 0x8, 0x8, 0x6, 0x4, 0xfffffffffffffff8, 0x8000, 0x1211, 0x5d21, 0x9, 0x8, 0x1, 0x2, 0x7, 0x5, 0x37d6, 0x4, 0x40, 0xff, 0xffffffffffffffff, 0x2, 0x6, 0x7, 0x400, 0x3, 0xff, 0x1, 0xfff, 0xfff, 0x7, 0xca0, 0x101, 0x8001, 0x10000, 0x3, 0xb4a7, 0x2]}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f00000002c0)=@hopopts={0x3b, 0x2, [], [@generic={0x6, 0x14, "d1e5509380b602e3c69af43656ad3eaed40a23e4"}]}, 0x20) [ 466.253465][T13769] usbhid 2-1:1.0: can't add hid device: -71 [ 466.259675][T13769] usbhid: probe of 2-1:1.0 failed with error -71 [ 466.336700][T13769] usb 2-1: USB disconnect, device number 19 21:46:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="753f7a6b315c32b039efeea4a5ce2b566197dc94", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x3f00}, 0x0) [ 466.673500][ T3088] usb 3-1: new full-speed USB device number 27 using dummy_hcd 21:46:04 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = memfd_create(&(0x7f00000000c0)=')\xb2\xb6W|\x99\xe1\xff\'\xa7I\x8a\x1c\x06p\xbb\x9d\x0e\x97\xcb\x06\x8b\xc6\f\x15P\x80\xe0\xd9\x93\xa2\xef\xf0\x88\x1bwH\xd2>#-\x0ePU\xba\x19G\x97\xd9\xa8\x9b\xcbc\xdb\\\xefTW\xed\xa7\x0f\x19\xc3\x8d\x16\xfa\x11w\xf8wV\xa4@\xaf6!-\x9dMN*\x90\x18H\xee\xbc-\xa8/\xd7%\xd7qA\f\xf0\xd0\xa9\xf9\xd4\xa4\xd2\xca\xde\a\x87\x1e\x16\x91\xd4\xb93L\xad\xbb\xc9\x9f\x9f\xc4\xdc\"*:~\b/\xcbl', 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="080806020003"], 0x6) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x12) sendfile(r1, r2, &(0x7f0000000000), 0x7fffffffffffffff) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000180)) 21:46:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) [ 466.907972][T17597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 467.099323][ T3088] usb 3-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 467.123425][ T3088] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.146811][T17574] IPVS: ftp: loaded support on port[0] = 21 21:46:05 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x8, 0xfffffffffffffffc, [{0x0, 0x2}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x200, 0x6, 0x4, 0xb236, 0x2000000}}}}}, 0x0) 21:46:05 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) r4 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r6, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) process_vm_writev(r1, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 21:46:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200000c, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='caif0\x00', 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x4000000000dc) r4 = openat2(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4040, 0x20}, 0x18) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000380)={r3, 0x80000001}) [ 467.333940][ T3088] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 467.343473][ T3088] usb 3-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 467.351861][ T3088] usb 3-1: Product: syz [ 467.358815][ T3088] usb 3-1: Manufacturer: syz [ 467.365991][ T3088] usb 3-1: SerialNumber: syz [ 467.414470][ T3088] cdc_acm 3-1:1.0: Zero length descriptor references [ 467.421247][ T3088] cdc_acm: probe of 3-1:1.0 failed with error -22 21:46:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @local}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0x0, 0x10000}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xac, 0x448000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000140)="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") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14c, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0xda, 0x24, "ef42436fe6bd8421309fe272dc23606782394b132a5c21b32343d030294a40360b6ac3a8a13b53de215d5ac9b1ac2e0f7b6ac937b35e73a268a36cbdf3fc2432beac2e863109ecb61ec25035f4f9fb7aea02a3a87329447179160fab7ca567c2622bb17bfbee7d8c8b9a102fd9491800e098a71ca10bec9dbda4d3fec110ee50cc427971e836b6021020cc14eb587adcd9913add4ccff191db5b28004d4dbcf9f5a55dcbff63d1299a64907d8a91b920472e4feb7502009e64e9758df87ce17fb585a8d9ba4a7b67cfaf9512c55a24d867030bbf82e0"}, @NL80211_ATTR_MESH_ID={0x41, 0x18, "63f8bb77b8c902d90bdcaa368efeea62599f5071ba7085aa7f1a8b7cc907baa03a118a3b852833e0c226c2d360ffca0af31d34a2989763b5366a30b6b5"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3f}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}]}, 0x14c}}, 0x40004) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) r7 = pidfd_open(r6, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x200, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000540)={0x4, 0x6, 0x9, 0x0, 0x4}) 21:46:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff7fff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3b, 0x0, "d0dda952daf43c08a4bcd60a6445964f031512956da90ef6e14590a6fd7becc35f971234e4464e686bd9fbb43dde35902645b25d7051dbc50630b90721d0d4d91afc9243afe5543ab07fc6f1a432fa00"}, 0xd8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x14000004, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 21:46:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="3edb92b24d0500000000000000aa81ed4d5fc02ec7000cfeb702d90009000200000000000000"], 0x10ac}], 0x1}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x1}, 0x16, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = fsmount(r3, 0x1, 0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)=0x8001, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000240)='mand\x00', 0x0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0x101, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0xffffff4d, 0x7, 0x6], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000200)={0x1, 0x200, 0x9, 0xff, 0x8, 0x2, 0x1, 0x1, 0x2}) 21:46:05 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) ptrace$setregs(0xf, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) geteuid() r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x24) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 21:46:05 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpid() r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) 21:46:07 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x29) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @private=0xa010100}}, 0x24) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) close(r0) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = getpid() sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x0) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) ioctl$TIOCGWINSZ(r2, 0x5413, 0x0) ftruncate(r0, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 21:46:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x70}}, 0x0) 21:46:07 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) r4 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r6, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) process_vm_writev(r1, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 21:46:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x8800, 0x0) mq_getsetattr(r4, &(0x7f0000000240)={0x6, 0x200, 0x7ff, 0x8000}, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000906050200000000000000000a0000beae00010007006500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) getpeername$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, &(0x7f0000000300)=0x10) fcntl$getflags(0xffffffffffffffff, 0x1) sendto$inet6(r3, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:46:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x265) [ 469.340738][ T8092] usb 3-1: USB disconnect, device number 27 21:46:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_NMI(r1, 0xae9a) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x115400, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x400000, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xb4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x0, 0x4}}, 0x20) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:46:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='p', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21:46:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() tkill(r1, 0x40) ptrace$getenv(0x4201, r1, 0x2, &(0x7f00000001c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmsg$xdp(r2, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0xa, 0x0, 0x1f}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000003c0)="c0d6b6f2246ae54e95d190a72c2a05fba066b545f861938a1f1bfa16999a441785a6d25259f87c5d12f0195c2f6bcdf554f792d8dcec0709e143cfad0c2c2eef31c553e00093b4278809b323450e306dfd04f30ca8b8b14116bb62", 0x5b}, {&(0x7f0000000540)="f415409c11b66ee286396fbdff6a5a2e0427fcbcfc4f6ef9f360fef7e813e0b874bde607763d591eefd4e6f06e6805b26f55db6d8befc0cf838dd541110c187defecb84027aa807f4949e6d63de4070461a174ccd78fd0386d4ea082b16e989a23dc4b14ee31d44dcac26d295f87784446aa6f680b6dd734dcc3b74cf890faae57965f6144b9a0b4a1aa19b3c8882c258a4488e97f3351bd0589f367a5662d3d829c9a21918f4543ab9c9bc4ff314c98d36e00ab6e1ac0524931091191df9526a3ab16b6a69f1de662e82ea4f3fee93a397766626a974d5ddaeec58fb168", 0xde}, {&(0x7f0000000640)="29242fe0c9fb042bc09c313b79351da188372e6f8d862619e1b82d0012bb25510236c482ffdb20fd606983780ff3d35c667d4d74620acd3b4bf14a6e25e648622fd6138636c1c1dbd79c4bb68485d3bfce3267e52f3c757b4edf7d65b7dfa7b443d88020f4d9e089e0ce3fb82a659ae2dabccaae5497a1a93f83e65bab35b5552f4490b869cc784110cf40785de2cad97277ffe54ef6abc022111be5035f", 0x9e}, {&(0x7f0000000700)="dcc2dca87bae04d566827e7ada544b48ee278cbe5bf03f1fcc6ecd029c709466ba6aaaf2a32581a46341fbe582e24b0e9c4f0e439714c5adbfbb68b5735d7c4857f30b1918b41f55e9fbc917d523496f4e63dbf65b9ff40a6511874a1973fef99ad3d34d0112f0c61e01e7b0330cd81d1bce405d114ad00d5ecabe6ca0d579625fed2194f86c74aeb348d52c3cc021f269ec0a7b606eab1d7c639a12aa38eae20c509fce5a872b4d3c0ba69d90b43db72768ec6322c9cbbc1b6cf8c3b0b3c3f1948647e6c2f19c035792a1aac60f15b248cc8dc9ad8a219f9b", 0xd9}, {&(0x7f0000000800)="0959b02377cd801d371edb18fd8350b6d93adc51ec41df2763bfd83f07b75459155687bf7aee3c3e6ce580a7128083eab5cee4434768b19c78ff3cd917778f96f8ca40048815d10c3ea53a25f60953d506fd12093291fa7b2a1074222714af9480a5bf97228b81e29162d733d61f43e0fab907ebb16360e24df577d6a2e18bc4c52db9a9d0931d7babfc4a0ebd2e9ab46fa4b887e21906250b079be32ec46714eeb6a9733fad5d85a1bde66cd25dfb0a057443790dcd08e1e7419e7ec044286a52df6b37a80f8c2762c357dac16f61834ce4af504477e8ed2c3575f0dded7373202fde61e60732e7674e8a67ee57e62ee1", 0xf1}, {&(0x7f0000000900)="200314ce0cdbd3543157a45cd018124c76cacb68e9abeb8a231441d3c466c02d70ec2f8beb726acd636ba837fe3c6ab2647277a1e83e97758bbd3bd92cd525b926601d79b3e7336024773763926a11bcc4685d8b7d01df0b19cfa2f431dba5fcce376a69aee7e5bd0c51b4898a5c2c5799eafbc6f36c204362a071915e5917379607d9778e5184e94ebc22a26f6293e4ad8d0bdc9152cadd59215c66181075a8d05c52786bea1c167d8b313624040a72f18d0ba94a8dabff242aaae9f739c445c24ef0f59a676aa6273a136e6881bc9b6c18e6219606978879895cfd8d9c4fba9b8405e7c756cebdeb49ba7bf74add492418c5e9001cfc93f1c5", 0xfa}, {&(0x7f0000000440)="f84df93026654431375ce832acc386035ab49be842980c3b818a879d0683e11df10a7b3980452cd794c868eebe26eb0bae48cd7d10ba8a1216c0a6d8090838eb3bf3921b51d59a6ab4fbb2e18481eb8df0c7b9406e46e06a50ea8bf2c522fe73a81c598951310a169ea17a3cf8c0ab4ee1fe1cc94f55a2878900e2405c078e", 0x7f}], 0x7, 0x0, 0x0, 0x20008800}, 0x4000880) r4 = socket(0x22, 0x803, 0xfffffffe) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000a80)={{0x10b, 0x20, 0x3f, 0x13b, 0x2a3, 0x1cd3, 0x64, 0x9}, "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", [[], [], [], []]}, 0x1420) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) socket(0x1000000010, 0x80002, 0x0) [ 469.771499][ T27] audit: type=1800 audit(1597441567.552:51): pid=17693 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15778 res=0 errno=0 21:46:07 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140), 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x6, 0xff, 0x5, 0x25, r0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, 0xfffffffffffffffe, 0x20000080) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) [ 469.946700][T17716] IPVS: ftp: loaded support on port[0] = 21 21:46:07 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140), 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x6, 0xff, 0x5, 0x25, r0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, 0xfffffffffffffffe, 0x20000080) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 21:46:08 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) pipe(&(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) 21:46:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1b25070700000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000007b9d00000000000000000000000000000000000000000000000000000000d447e99033288c69716d3257c6730d3d41a806c8f52aa2bc7223ab5c253cd8d10b450d729b5b14289a983686b24a2e0aed0fb92fae24471df746b8964ac2b7780f0d00daa791a2855882ef745872d3985fb9e88d4894f81ce40dc94ac1e4f59eccb46c7d5dfb8b7542136f42159539229089388eb37e08"], 0x78) 21:46:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1ff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') socket(0x40000000015, 0x5, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000001180)=""/4111) socket$inet_sctp(0x2, 0x1, 0x84) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) 21:46:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2d7, 0x7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) [ 470.421626][T17746] IPVS: ftp: loaded support on port[0] = 21 [ 470.557146][T17758] IPVS: ftp: loaded support on port[0] = 21 [ 471.100772][T17743] IPVS: ftp: loaded support on port[0] = 21 21:46:08 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) r4 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r6, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) process_vm_writev(r1, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 21:46:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000000000002bc, 0x0) 21:46:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x2000000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x1db, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 21:46:08 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) [ 471.275873][T17759] IPVS: ftp: loaded support on port[0] = 21 21:46:09 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe5, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f00007c7000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x8000000) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mmap$usbmon(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x500000f, 0x1010, r5, 0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000080)={0x0, {0x43eb, 0xfffffffe, 0x7, 0x9}, {0xb3, 0x6, 0x7, 0x80000000}, {0xfffffc01}}) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 471.478608][ T3508] tipc: TX() has been purged, node left! 21:46:09 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001500)={0x0, 0x86, 0xd3}, &(0x7f0000001540)={'enc=', 'oaep', ' hash=', {'cmac-aes-ce\x00'}}, &(0x7f00000015c0)="f5dfb1dde7334404d5cfdc86f93f0a873be938eaa74fb80049cc511898ca48152dfbbfc67c64c49eff66cd6d70232d5d58328664d140caf1fcb1cd93543c85ed426e10cd5f705033915e7ca6abf66222e7f5f2d19c3dfb22f22f1ba37b5ceed3516b0b134455ec3cd7bac4b4703f9b55a124880e5e694e735329e2b8aa5b8eb4415a7429837d", &(0x7f00000016c0)=""/211) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000140)={0x401}) sendfile(r1, r2, 0x0, 0x80001d00c0d0) io_setup(0x81, &(0x7f0000000040)=0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 471.709616][ T27] audit: type=1800 audit(1597441569.492:52): pid=17836 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15782 res=0 errno=0 21:46:09 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140), 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x6, 0xff, 0x5, 0x25, r0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, 0xfffffffffffffffe, 0x20000080) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) [ 471.911353][T17841] IPVS: ftp: loaded support on port[0] = 21 21:46:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x100, 0x4, 0x3, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000140)={0x10000, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'vcan0\x00', {}, 0xc14}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) 21:46:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) [ 472.231917][ T27] audit: type=1800 audit(1597441570.012:53): pid=17836 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15783 res=0 errno=0 21:46:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9c0a, 0x101000) wait4(0x0, 0x0, 0x0, 0x0) [ 472.353966][T17850] IPVS: ftp: loaded support on port[0] = 21 21:46:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x7fffffff}, 0x10000, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() r1 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)={0x444400, 0x0, 0x5}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2}, 0x0) pipe(0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/4083, 0x1000}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000100)=""/56, 0x38}], 0x3, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/218, 0x29}], 0x29, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000700000014000800"/34], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf250200000005001200400000007dcbcf5df5836bf59dc2e1912273b2dd30b4ec1edd170fd1682d1358a100b4981bfaa7c83a254c9bb005b00d63b46ffbc9e0f490fb938b618467fa1fc7efabbd13bd1959b2994830dc8438ed03b4ab5c639e837a5f6bc3692de87bd2af6740c1198d75645b49ab4f7d2aecd45d64c0055a7214b31a5075710abe376284df7e4730e13143a1652b2f52bbe007c611930358e8e3e9f44f74bf17331662684e58dfb5613be290173fd9e9ac634428167b1a1dfeee7ee43d3382645c93100bacaad10b73fefc846ceebf7d6799faf0181e401cdb8380d31b91f0958c63ccaf1448f54991c6a91bcaf2815c4b9ed2604acef640f63ebf2af1716e89225186948d1a2aa5a4cd75542cb28fd6eac61bd9d46fe4fec44c9c68f3"], 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x4040001) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) syz_open_procfs(0xffffffffffffffff, 0x0) [ 472.637541][T17866] IPVS: ftp: loaded support on port[0] = 21 [ 473.092013][T17893] IPVS: ftp: loaded support on port[0] = 21 [ 473.421833][T17878] IPVS: ftp: loaded support on port[0] = 21 21:46:11 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r5, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) 21:46:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x265) 21:46:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x4, 0x2, 0x5}, 0x3}}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0xe79}) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) timer_create(0x3, &(0x7f0000000300)={0x0, 0x2f, 0x2}, &(0x7f0000000340)) [ 473.837178][T17960] IPVS: ftp: loaded support on port[0] = 21 21:46:12 executing program 3: pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:12 executing program 3: pipe(&(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:12 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 476.080781][T18002] IPVS: ftp: loaded support on port[0] = 21 21:46:14 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140), 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x6, 0xff, 0x5, 0x25, r0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, 0xfffffffffffffffe, 0x20000080) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000000c0)=0x4) [ 476.642083][T18041] IPVS: ftp: loaded support on port[0] = 21 [ 476.717709][ T3508] tipc: TX() has been purged, node left! 21:46:16 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r0, &(0x7f0000000100)=0x20000100000094, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0xc1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="35a0f51351ff7bafd7c79700000000", @ANYRES16=r5, @ANYBLOB="02002dbd7000fedbdf2501000000000000000941000000180018000001ff6574683a73797a6b616c6c6572310000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x49894) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000280)={r4, 0x1000, 0x6}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1ba, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2500}]}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockname$tipc(r6, 0x0, 0x0) 21:46:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00000a) 21:46:16 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:16 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) 21:46:16 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r5, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) 21:46:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000200)=0x13, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@ax25={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) 21:46:16 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 21:46:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x1}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x7e, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:46:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) r0 = socket(0x10, 0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="f9ff07000100687462001c0000001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) 21:46:17 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$P9_RLERROR(r4, &(0x7f00000000c0)={0x9, 0x7, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="3f0000006d3cd4d2f886de9c18e84446ecbfbea504ec949eeb2f12240db2ce330803b7689f474d02a1c3c65350cb0b", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40) 21:46:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) [ 479.827769][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.887616][T18120] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.909629][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:18 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) 21:46:18 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r5, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) 21:46:18 executing program 3: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:18 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fc0009003c0800240042ef42000000010902"], 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000f90000082505a8a40700000000010902240001010000000904000012070103000905010200ffe100000905820255"], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = gettid() tkill(r3, 0x40) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x7, 0x10000, r3}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000001c0)=""/183) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000080)) ptrace$setregs(0xf, r3, 0x3, &(0x7f00000002c0)="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") syz_usb_disconnect(r0) 21:46:18 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000001cc0)={'syztnl0\x00', &(0x7f0000001c40)={'ip6_vti0\x00', r5, 0x0, 0x7f, 0x3, 0x80000001, 0x1, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x751, 0x8, 0x5, 0x2}}) r8 = creat(&(0x7f0000001d00)='./file0\x00', 0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) clone3(&(0x7f0000001f80)={0x4000, &(0x7f0000001d40), &(0x7f0000001d80)=0x0, &(0x7f0000001dc0), {0x2}, &(0x7f0000001e00)=""/36, 0x24, &(0x7f0000001e40)=""/254, &(0x7f0000001f40)=[0xffffffffffffffff, 0x0], 0x2, {r9}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x121402) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000380)="53000000fcffffff00c7853ac9669d04fc000000000200a883bf77fe4bc937070ea3e8d9b28404200000cdf5d887d9739600000001000000a4000000000000000000af97090772cf763acd0e7d7973752e1849de0c103de5", 0x58}], 0x2) 21:46:18 executing program 3: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:18 executing program 3: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:18 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) [ 480.691729][ T8173] usb 1-1: new high-speed USB device number 21 using dummy_hcd 21:46:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:18 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 480.942657][ T8173] usb 1-1: Using ep0 maxpacket: 8 [ 480.978482][T18173] FAULT_INJECTION: forcing a failure. [ 480.978482][T18173] name failslab, interval 1, probability 0, space 0, times 1 [ 481.012635][T18173] CPU: 0 PID: 18173 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 481.012645][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:46:18 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) [ 481.012650][T18173] Call Trace: [ 481.012671][T18173] dump_stack+0x18f/0x20d [ 481.012690][T18173] should_fail.cold+0x5/0x14 [ 481.012710][T18173] should_failslab+0x5/0xf [ 481.012725][T18173] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 481.012741][T18173] kmem_cache_alloc_trace+0x49/0x2c0 [ 481.012763][T18173] alloc_pipe_info+0x10a/0x590 [ 481.012783][T18173] splice_direct_to_actor+0x779/0x980 [ 481.012802][T18173] ? generic_splice_sendpage+0x140/0x140 [ 481.012816][T18173] ? apparmor_file_permission+0x26e/0x4e0 [ 481.012831][T18173] ? do_splice_to+0x170/0x170 [ 481.012844][T18173] ? security_file_permission+0x248/0x560 [ 481.012866][T18173] do_splice_direct+0x1b3/0x280 [ 481.012888][T18173] ? splice_direct_to_actor+0x980/0x980 [ 481.012906][T18173] ? security_file_permission+0x248/0x560 [ 481.012928][T18173] do_sendfile+0x55f/0xd40 [ 481.012951][T18173] ? do_compat_pwritev64+0x1b0/0x1b0 [ 481.013019][T18173] ? wait_for_completion+0x260/0x260 [ 481.013035][T18173] ? vfs_write+0x1b0/0x730 [ 481.013052][T18173] __x64_sys_sendfile64+0x1cc/0x210 [ 481.013066][T18173] ? __ia32_sys_sendfile+0x220/0x220 [ 481.013082][T18173] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 481.013097][T18173] ? trace_hardirqs_on+0x5f/0x220 [ 481.013120][T18173] ? lockdep_hardirqs_on+0x76/0xf0 [ 481.013136][T18173] do_syscall_64+0x2d/0x70 [ 481.013153][T18173] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.013165][T18173] RIP: 0033:0x45d239 [ 481.013181][T18173] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.013190][T18173] RSP: 002b:00007fa5a3e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 481.013204][T18173] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d239 [ 481.013213][T18173] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 481.013220][T18173] RBP: 00007fa5a3e97ca0 R08: 0000000000000000 R09: 0000000000000000 [ 481.013228][T18173] R10: 0000000000000265 R11: 0000000000000246 R12: 0000000000000000 [ 481.013237][T18173] R13: 000000000169fb6f R14: 00007fa5a3e989c0 R15: 000000000118cf4c 21:46:19 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:19 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r5, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000001240)={0xc6, 0x34, &(0x7f0000001280)="bdce72449eb3713fc156bdcc3fe015d78ddf929c8b3782bf81cf0aeecf4238b8652497466792cff35343cf5eb29c2f46ace2f048f5686e529edf9d4e99e61e7767d43fb9f47decbc949e5165e5ae31", &(0x7f0000001300)="08708ea80100000000000000f4e56be8dc18891e7484ca63d140e271751bd58b575b9d3e9395520baa2dc0c8ed2e596e6030b8f6b9acdddf8ed086ee3430971359668616ae3f38382069ea69c3a15b53a68adc657821ea0562c3f3cdfdee9c1be0a310b2edf30d125e91006a4af4de530133e3b08bcad13daa0f4983a5f46511778d5af23ea74658985ffb126a8b1c7b7b7bd013c389389628ddf62dd0af00c4921b76a50cc3701e6095d4ada9f77c58cf6a436b5fb8f4a4f9bc7272cf66d7fa4819f6a63cc9cf3c4c3813e88ee586c520dd97263f1dacf065", 0xfffffffffffffe47, 0x2a}) [ 481.071988][ T8173] usb 1-1: config 0 has no interfaces? [ 481.072019][ T8173] usb 1-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 481.072035][ T8173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.075827][ T8173] usb 1-1: config 0 descriptor?? [ 481.314635][ T8173] usb 1-1: USB disconnect, device number 21 [ 481.469062][T18192] FAULT_INJECTION: forcing a failure. [ 481.469062][T18192] name failslab, interval 1, probability 0, space 0, times 0 [ 481.469080][T18192] CPU: 1 PID: 18192 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 481.469088][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.469093][T18192] Call Trace: [ 481.469111][T18192] dump_stack+0x18f/0x20d [ 481.469130][T18192] should_fail.cold+0x5/0x14 [ 481.469149][T18192] ? alloc_pipe_info+0x1e5/0x590 [ 481.469162][T18192] should_failslab+0x5/0xf [ 481.469176][T18192] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 481.469190][T18192] __kmalloc+0x6f/0x320 [ 481.469203][T18192] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 481.469222][T18192] alloc_pipe_info+0x1e5/0x590 [ 481.469240][T18192] splice_direct_to_actor+0x779/0x980 [ 481.469259][T18192] ? generic_splice_sendpage+0x140/0x140 [ 481.469274][T18192] ? apparmor_file_permission+0x26e/0x4e0 [ 481.469287][T18192] ? do_splice_to+0x170/0x170 [ 481.469300][T18192] ? security_file_permission+0x248/0x560 [ 481.469320][T18192] do_splice_direct+0x1b3/0x280 [ 481.469335][T18192] ? splice_direct_to_actor+0x980/0x980 [ 481.469352][T18192] ? security_file_permission+0x248/0x560 [ 481.469373][T18192] do_sendfile+0x55f/0xd40 [ 481.469395][T18192] ? do_compat_pwritev64+0x1b0/0x1b0 [ 481.469410][T18192] ? wait_for_completion+0x260/0x260 [ 481.469424][T18192] ? vfs_write+0x1b0/0x730 [ 481.469440][T18192] __x64_sys_sendfile64+0x1cc/0x210 [ 481.469453][T18192] ? __ia32_sys_sendfile+0x220/0x220 [ 481.469467][T18192] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 481.469481][T18192] ? trace_hardirqs_on+0x5f/0x220 [ 481.469495][T18192] ? lockdep_hardirqs_on+0x76/0xf0 [ 481.469510][T18192] do_syscall_64+0x2d/0x70 [ 481.469525][T18192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.469536][T18192] RIP: 0033:0x45d239 [ 481.469551][T18192] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.469559][T18192] RSP: 002b:00007fa5a3e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 481.469573][T18192] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d239 [ 481.469582][T18192] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 481.469590][T18192] RBP: 00007fa5a3e97ca0 R08: 0000000000000000 R09: 0000000000000000 [ 481.469599][T18192] R10: 0000000000000265 R11: 0000000000000246 R12: 0000000000000001 [ 481.469607][T18192] R13: 000000000169fb6f R14: 00007fa5a3e989c0 R15: 000000000118cf4c [ 482.031583][ T8173] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 482.275744][ T8173] usb 1-1: Using ep0 maxpacket: 8 [ 482.401620][ T8173] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 482.413093][ T8173] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 482.424242][ T8173] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 85 [ 482.435133][ T8173] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 482.448801][ T8173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 482.458462][ T8173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.482949][T18146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 482.490234][T18146] raw-gadget gadget: fail, usb_ep_enable returned -22 21:46:20 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) 21:46:20 executing program 4: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) 21:46:20 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:20 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) 21:46:20 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) 21:46:20 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) [ 482.781429][ T8173] usblp: can't set desired altsetting 0 on interface 0 [ 482.803816][ T8173] usb 1-1: USB disconnect, device number 22 [ 482.823597][T18219] FAULT_INJECTION: forcing a failure. [ 482.823597][T18219] name failslab, interval 1, probability 0, space 0, times 0 [ 482.886102][T18219] CPU: 1 PID: 18219 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 482.895006][T18219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.905070][T18219] Call Trace: [ 482.908372][T18219] dump_stack+0x18f/0x20d [ 482.912716][T18219] should_fail.cold+0x5/0x14 [ 482.917328][T18219] should_failslab+0x5/0xf [ 482.921904][T18219] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 482.927989][T18219] kmem_cache_alloc_node_trace+0x59/0x400 [ 482.933724][T18219] ? __lock_acquire+0xbb5/0x5640 [ 482.938805][T18219] __kmalloc_node+0x38/0x60 [ 482.943321][T18219] kvmalloc_node+0x61/0xf0 [ 482.947755][T18219] iov_iter_get_pages_alloc+0x82a/0x1440 [ 482.953427][T18219] ? push_pipe+0x680/0x680 [ 482.953445][T18219] ? lock_acquire+0x1f1/0xad0 [ 482.953460][T18219] ? aa_file_perm+0x119/0x1100 [ 482.953473][T18219] ? iov_iter_pipe+0xf1/0x2a0 [ 482.953494][T18219] default_file_splice_read.constprop.0+0x1c9/0x9e0 21:46:20 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 482.953511][T18219] ? lock_downgrade+0x830/0x830 [ 482.953523][T18219] ? __kmalloc+0x1a8/0x320 [ 482.953538][T18219] ? do_splice_direct+0x1b3/0x280 [ 482.953552][T18219] ? __x64_sys_sendfile64+0x1cc/0x210 [ 482.953567][T18219] ? iter_file_splice_write+0xbe0/0xbe0 [ 482.953586][T18219] ? aa_file_perm+0x5e2/0x1100 [ 482.953605][T18219] ? aa_path_link+0x2f0/0x2f0 [ 482.953619][T18219] ? find_held_lock+0x2d/0x110 21:46:21 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 482.953634][T18219] ? fs_reclaim_release+0x90/0xd0 [ 482.953646][T18219] ? __fsnotify_parent+0x48c/0x930 [ 482.953659][T18219] ? fsnotify+0xf80/0xf80 [ 482.953679][T18219] ? lock_downgrade+0x830/0x830 [ 482.953696][T18219] ? lock_is_held_type+0xbb/0xf0 [ 482.953710][T18219] ? lock_is_held_type+0xbb/0xf0 [ 482.953733][T18219] ? security_file_permission+0x248/0x560 21:46:21 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 482.953754][T18219] do_splice_to+0x137/0x170 [ 482.953771][T18219] splice_direct_to_actor+0x307/0x980 [ 482.953789][T18219] ? generic_splice_sendpage+0x140/0x140 [ 482.953806][T18219] ? do_splice_to+0x170/0x170 [ 482.953818][T18219] ? security_file_permission+0x248/0x560 [ 482.953840][T18219] do_splice_direct+0x1b3/0x280 [ 482.953856][T18219] ? splice_direct_to_actor+0x980/0x980 [ 482.953872][T18219] ? security_file_permission+0x248/0x560 [ 482.953894][T18219] do_sendfile+0x55f/0xd40 [ 482.953917][T18219] ? do_compat_pwritev64+0x1b0/0x1b0 [ 482.953933][T18219] ? wait_for_completion+0x260/0x260 [ 482.953949][T18219] ? vfs_write+0x1b0/0x730 [ 482.953965][T18219] __x64_sys_sendfile64+0x1cc/0x210 [ 482.953980][T18219] ? __ia32_sys_sendfile+0x220/0x220 [ 482.953994][T18219] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 482.954009][T18219] ? trace_hardirqs_on+0x5f/0x220 [ 482.954023][T18219] ? lockdep_hardirqs_on+0x76/0xf0 [ 482.954039][T18219] do_syscall_64+0x2d/0x70 [ 482.954054][T18219] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 482.954065][T18219] RIP: 0033:0x45d239 [ 482.954081][T18219] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 482.954089][T18219] RSP: 002b:00007fa5a3e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 482.954103][T18219] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d239 [ 482.954112][T18219] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 482.954121][T18219] RBP: 00007fa5a3e97ca0 R08: 0000000000000000 R09: 0000000000000000 [ 482.954130][T18219] R10: 0000000000000265 R11: 0000000000000246 R12: 0000000000000002 [ 482.954139][T18219] R13: 000000000169fb6f R14: 00007fa5a3e989c0 R15: 000000000118cf4c [ 483.176217][T18238] FAULT_INJECTION: forcing a failure. [ 483.176217][T18238] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 483.176244][T18238] CPU: 1 PID: 18238 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 483.176256][T18238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.176261][T18238] Call Trace: [ 483.176285][T18238] dump_stack+0x18f/0x20d [ 483.176308][T18238] should_fail.cold+0x5/0x14 [ 483.176330][T18238] __alloc_pages_nodemask+0x183/0x790 [ 483.176346][T18238] ? lock_downgrade+0x830/0x830 [ 483.176360][T18238] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 483.176378][T18238] ? lock_is_held_type+0xbb/0xf0 [ 483.176399][T18238] ? lock_is_held_type+0xbb/0xf0 [ 483.176418][T18238] alloc_pages_current+0x187/0x280 [ 483.176441][T18238] push_pipe+0x2a4/0x680 [ 483.176464][T18238] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 483.176482][T18238] ? push_pipe+0x680/0x680 [ 483.176497][T18238] ? lock_acquire+0x1f1/0xad0 [ 483.176510][T18238] ? aa_file_perm+0x119/0x1100 [ 483.176521][T18238] ? iov_iter_pipe+0xf1/0x2a0 [ 483.176540][T18238] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 483.176559][T18238] ? lock_downgrade+0x830/0x830 [ 483.176571][T18238] ? __kmalloc+0x1a8/0x320 [ 483.176585][T18238] ? do_splice_direct+0x1b3/0x280 [ 483.176600][T18238] ? __x64_sys_sendfile64+0x1cc/0x210 [ 483.176614][T18238] ? iter_file_splice_write+0xbe0/0xbe0 [ 483.176630][T18238] ? aa_file_perm+0x5e2/0x1100 [ 483.176651][T18238] ? aa_path_link+0x2f0/0x2f0 [ 483.176671][T18238] ? find_held_lock+0x2d/0x110 [ 483.176687][T18238] ? fs_reclaim_release+0x90/0xd0 [ 483.176702][T18238] ? __fsnotify_parent+0x48c/0x930 [ 483.176715][T18238] ? fsnotify+0xf80/0xf80 [ 483.176729][T18238] ? lockdep_hardirqs_on+0x76/0xf0 [ 483.176749][T18238] ? lock_is_held_type+0xbb/0xf0 [ 483.176763][T18238] ? lock_is_held_type+0xbb/0xf0 [ 483.176785][T18238] ? security_file_permission+0x248/0x560 [ 483.176806][T18238] do_splice_to+0x137/0x170 [ 483.176823][T18238] splice_direct_to_actor+0x307/0x980 [ 483.176842][T18238] ? generic_splice_sendpage+0x140/0x140 [ 483.176859][T18238] ? do_splice_to+0x170/0x170 [ 483.176871][T18238] ? security_file_permission+0x248/0x560 [ 483.176891][T18238] do_splice_direct+0x1b3/0x280 [ 483.176906][T18238] ? splice_direct_to_actor+0x980/0x980 [ 483.176922][T18238] ? security_file_permission+0x248/0x560 [ 483.176943][T18238] do_sendfile+0x55f/0xd40 [ 483.176963][T18238] ? do_compat_pwritev64+0x1b0/0x1b0 [ 483.176978][T18238] ? wait_for_completion+0x260/0x260 [ 483.176993][T18238] ? vfs_write+0x1b0/0x730 [ 483.177009][T18238] __x64_sys_sendfile64+0x1cc/0x210 [ 483.177022][T18238] ? __ia32_sys_sendfile+0x220/0x220 [ 483.177036][T18238] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 483.177050][T18238] ? trace_hardirqs_on+0x5f/0x220 [ 483.177063][T18238] ? lockdep_hardirqs_on+0x76/0xf0 [ 483.177078][T18238] do_syscall_64+0x2d/0x70 [ 483.177093][T18238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 483.177105][T18238] RIP: 0033:0x45d239 [ 483.177119][T18238] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.177127][T18238] RSP: 002b:00007fa5a3e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 483.177141][T18238] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d239 [ 483.177149][T18238] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 483.177158][T18238] RBP: 00007fa5a3e97ca0 R08: 0000000000000000 R09: 0000000000000000 [ 483.177165][T18238] R10: 0000000000000265 R11: 0000000000000246 R12: 0000000000000003 [ 483.177174][T18238] R13: 000000000169fb6f R14: 00007fa5a3e989c0 R15: 000000000118cf4c [ 483.308529][T18244] FAULT_INJECTION: forcing a failure. [ 483.308529][T18244] name failslab, interval 1, probability 0, space 0, times 0 [ 483.308644][T18244] CPU: 1 PID: 18244 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 483.308654][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.308658][T18244] Call Trace: [ 483.308679][T18244] dump_stack+0x18f/0x20d [ 483.308700][T18244] should_fail.cold+0x5/0x14 [ 483.308720][T18244] should_failslab+0x5/0xf [ 483.308734][T18244] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 483.308750][T18244] kmem_cache_alloc_node_trace+0x59/0x400 [ 483.308763][T18244] ? lock_acquire+0x1f1/0xad0 [ 483.308777][T18244] ? fs_reclaim_acquire+0xa1/0xf0 [ 483.308794][T18244] __kmalloc_node+0x38/0x60 [ 483.308810][T18244] kvmalloc_node+0x61/0xf0 [ 483.308825][T18244] seq_read+0x743/0x1070 [ 483.308846][T18244] ? seq_hex_dump+0x440/0x440 [ 483.308861][T18244] proc_reg_read+0x221/0x300 [ 483.308879][T18244] do_iter_read+0x48e/0x6e0 [ 483.308903][T18244] vfs_readv+0xe5/0x150 [ 483.308918][T18244] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 483.308933][T18244] ? push_pipe+0x3d1/0x680 [ 483.308955][T18244] ? iov_iter_get_pages_alloc+0x365/0x1440 [ 483.308975][T18244] ? push_pipe+0x680/0x680 [ 483.308992][T18244] ? lock_acquire+0x1f1/0xad0 [ 483.309005][T18244] ? aa_file_perm+0x119/0x1100 [ 483.309016][T18244] ? iov_iter_pipe+0xf1/0x2a0 [ 483.309035][T18244] default_file_splice_read.constprop.0+0x4e6/0x9e0 [ 483.309054][T18244] ? do_splice_direct+0x1b3/0x280 [ 483.309066][T18244] ? __x64_sys_sendfile64+0x1cc/0x210 [ 483.309080][T18244] ? iter_file_splice_write+0xbe0/0xbe0 [ 483.309097][T18244] ? aa_file_perm+0x5e2/0x1100 [ 483.309115][T18244] ? aa_path_link+0x2f0/0x2f0 [ 483.309129][T18244] ? find_held_lock+0x2d/0x110 [ 483.309143][T18244] ? fs_reclaim_release+0x90/0xd0 [ 483.309155][T18244] ? __fsnotify_parent+0x48c/0x930 [ 483.309169][T18244] ? fsnotify+0xf80/0xf80 [ 483.309182][T18244] ? lock_downgrade+0x830/0x830 [ 483.309198][T18244] ? lock_is_held_type+0xbb/0xf0 [ 483.309212][T18244] ? lock_is_held_type+0xbb/0xf0 [ 483.309234][T18244] ? security_file_permission+0x248/0x560 [ 483.309254][T18244] do_splice_to+0x137/0x170 [ 483.309271][T18244] splice_direct_to_actor+0x307/0x980 [ 483.309290][T18244] ? generic_splice_sendpage+0x140/0x140 [ 483.309307][T18244] ? do_splice_to+0x170/0x170 [ 483.309320][T18244] ? security_file_permission+0x248/0x560 [ 483.309341][T18244] do_splice_direct+0x1b3/0x280 [ 483.309357][T18244] ? splice_direct_to_actor+0x980/0x980 [ 483.309374][T18244] ? security_file_permission+0x248/0x560 [ 483.309395][T18244] do_sendfile+0x55f/0xd40 [ 483.309417][T18244] ? do_compat_pwritev64+0x1b0/0x1b0 [ 483.309432][T18244] ? wait_for_completion+0x260/0x260 [ 483.309447][T18244] ? vfs_write+0x1b0/0x730 [ 483.309464][T18244] __x64_sys_sendfile64+0x1cc/0x210 [ 483.309477][T18244] ? __ia32_sys_sendfile+0x220/0x220 [ 483.309492][T18244] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 483.309506][T18244] ? trace_hardirqs_on+0x5f/0x220 [ 483.309520][T18244] ? lockdep_hardirqs_on+0x76/0xf0 [ 483.309536][T18244] do_syscall_64+0x2d/0x70 [ 483.309550][T18244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 483.309562][T18244] RIP: 0033:0x45d239 [ 483.309577][T18244] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.309586][T18244] RSP: 002b:00007fa5a3e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 483.309601][T18244] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d239 [ 483.309610][T18244] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 483.309619][T18244] RBP: 00007fa5a3e97ca0 R08: 0000000000000000 R09: 0000000000000000 [ 483.309628][T18244] R10: 0000000000000265 R11: 0000000000000246 R12: 0000000000000004 [ 483.309644][T18244] R13: 000000000169fb6f R14: 00007fa5a3e989c0 R15: 000000000118cf4c [ 483.406594][T18248] FAULT_INJECTION: forcing a failure. [ 483.406594][T18248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 484.299012][T18248] CPU: 1 PID: 18248 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 484.299021][T18248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.299026][T18248] Call Trace: [ 484.299050][T18248] dump_stack+0x18f/0x20d [ 484.299067][T18248] should_fail.cold+0x5/0x14 [ 484.299080][T18248] ? seq_read+0x61/0x1070 [ 484.299098][T18248] __alloc_pages_nodemask+0x183/0x790 [ 484.299114][T18248] ? lock_acquire+0x1f1/0xad0 [ 484.299129][T18248] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 484.299149][T18248] ? fs_reclaim_release+0x90/0xd0 [ 484.299171][T18248] cache_grow_begin+0x71/0x430 [ 484.299187][T18248] cache_alloc_refill+0x27b/0x340 [ 484.299204][T18248] ? lockdep_hardirqs_off+0x89/0xc0 [ 484.299220][T18248] kmem_cache_alloc_node_trace+0x3de/0x400 [ 484.299241][T18248] __kmalloc_node+0x38/0x60 [ 484.299257][T18248] kvmalloc_node+0x61/0xf0 [ 484.299274][T18248] seq_read+0x743/0x1070 [ 484.389434][T18248] ? seq_hex_dump+0x440/0x440 [ 484.389452][T18248] proc_reg_read+0x221/0x300 [ 484.389471][T18248] do_iter_read+0x48e/0x6e0 [ 484.389495][T18248] vfs_readv+0xe5/0x150 [ 484.389512][T18248] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 484.389535][T18248] ? push_pipe+0x3d1/0x680 [ 484.389557][T18248] ? iov_iter_get_pages_alloc+0x365/0x1440 [ 484.389577][T18248] ? push_pipe+0x680/0x680 [ 484.389594][T18248] ? lock_acquire+0x1f1/0xad0 [ 484.389608][T18248] ? aa_file_perm+0x119/0x1100 [ 484.389620][T18248] ? iov_iter_pipe+0xf1/0x2a0 [ 484.389641][T18248] default_file_splice_read.constprop.0+0x4e6/0x9e0 [ 484.389660][T18248] ? do_splice_direct+0x1b3/0x280 [ 484.389673][T18248] ? __x64_sys_sendfile64+0x1cc/0x210 [ 484.389688][T18248] ? iter_file_splice_write+0xbe0/0xbe0 [ 484.389706][T18248] ? aa_file_perm+0x5e2/0x1100 [ 484.389725][T18248] ? aa_path_link+0x2f0/0x2f0 [ 484.389739][T18248] ? find_held_lock+0x2d/0x110 [ 484.389755][T18248] ? fs_reclaim_release+0x90/0xd0 [ 484.389772][T18248] ? __fsnotify_parent+0x48c/0x930 [ 484.389788][T18248] ? fsnotify+0xf80/0xf80 [ 484.389802][T18248] ? lock_downgrade+0x830/0x830 [ 484.389821][T18248] ? lock_is_held_type+0xbb/0xf0 [ 484.503037][T18248] ? lock_is_held_type+0xbb/0xf0 [ 484.503060][T18248] ? security_file_permission+0x248/0x560 [ 484.503084][T18248] do_splice_to+0x137/0x170 [ 484.503103][T18248] splice_direct_to_actor+0x307/0x980 [ 484.503123][T18248] ? generic_splice_sendpage+0x140/0x140 [ 484.503141][T18248] ? do_splice_to+0x170/0x170 [ 484.503155][T18248] ? security_file_permission+0x248/0x560 21:46:22 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) 21:46:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 484.503178][T18248] do_splice_direct+0x1b3/0x280 [ 484.503195][T18248] ? splice_direct_to_actor+0x980/0x980 [ 484.503214][T18248] ? security_file_permission+0x248/0x560 [ 484.503238][T18248] do_sendfile+0x55f/0xd40 [ 484.503263][T18248] ? do_compat_pwritev64+0x1b0/0x1b0 [ 484.503280][T18248] ? wait_for_completion+0x260/0x260 [ 484.503298][T18248] ? vfs_write+0x1b0/0x730 [ 484.503315][T18248] __x64_sys_sendfile64+0x1cc/0x210 [ 484.503328][T18248] ? __ia32_sys_sendfile+0x220/0x220 [ 484.503342][T18248] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 484.503357][T18248] ? trace_hardirqs_on+0x5f/0x220 [ 484.503371][T18248] ? lockdep_hardirqs_on+0x76/0xf0 [ 484.503387][T18248] do_syscall_64+0x2d/0x70 21:46:22 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) [ 484.503403][T18248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 484.503415][T18248] RIP: 0033:0x45d239 [ 484.503430][T18248] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.503439][T18248] RSP: 002b:00007fa5a3e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 21:46:22 executing program 4: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) [ 484.503453][T18248] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d239 [ 484.503461][T18248] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 484.503470][T18248] RBP: 00007fa5a3e97ca0 R08: 0000000000000000 R09: 0000000000000000 [ 484.503478][T18248] R10: 0000000000000265 R11: 0000000000000246 R12: 0000000000000005 [ 484.503486][T18248] R13: 000000000169fb6f R14: 00007fa5a3e989c0 R15: 000000000118cf4c 21:46:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2) 21:46:22 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) 21:46:22 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) 21:46:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x3) 21:46:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4) 21:46:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5) 21:46:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6) 21:46:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7) [ 485.713925][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 21:46:23 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) 21:46:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8) 21:46:23 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) 21:46:23 executing program 4: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10002, 0x0) 21:46:23 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) 21:46:23 executing program 0: clone(0x80200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x420100, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'wg2\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x5fffffc}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 21:46:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x9) 21:46:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xa) 21:46:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xb) 21:46:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={r5, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x7, 0x0, 0x0], &(0x7f0000000380)=[0x2, 0xe771], 0xb6, 0x5, 0x800, &(0x7f0000000480)=[0x5, 0x0, 0x4, 0x4, 0x400], &(0x7f0000000400)=[0x800, 0x17]}) r6 = userfaultfd(0x80800) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000140)={r5, 0x3}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000100)={r5}) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000240)=0x32c02, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x32, 0x75}, [@generic={0x2, 0x8, 0xd, 0x401, 0x2427}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x41000, 0x0, [], 0x0, 0x11, r9, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x8f) 21:46:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc) 21:46:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xd) 21:46:24 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) 21:46:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xe) 21:46:24 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) 21:46:25 executing program 4: clone(0x80920900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x7, 0x7, 0xb}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x7, 0x7, 0x9}, 0x40) semget$private(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000002c0)=""/21) semctl$GETPID(r2, 0x0, 0xb, &(0x7f00000000c0)=""/254) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xb, 0x4, 0x1, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 21:46:25 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 21:46:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xf) 21:46:25 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x200], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001080)={0x1, 0x0, [{0x10000, 0x1000, &(0x7f0000000080)=""/4096}]}) r1 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/llc/core\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000001100)={0xba, 0x7f}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001140)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000001180)=0x80000001) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_elf64(r3, &(0x7f00000011c0)={{0x7f, 0x45, 0x4c, 0x46, 0xab, 0xd7, 0x5, 0x7f, 0x80, 0x3, 0x3e, 0x0, 0x284, 0x40, 0x89, 0x2d, 0x21f, 0x38, 0x2, 0x7f, 0x101, 0x9}, [{0x4, 0xffff, 0x6, 0x100000000, 0x4, 0x0, 0x800, 0x26ca}], "2dd75004ed9089ce326405205a67c1f354e535ebd5f5044d5e352a35d0a3883faa69dc4caa01a383bd312b761aa334869f8e539b59e32af2f34a27a3e3b9", [[], [], [], [], []]}, 0x5b6) r4 = syz_open_dev$vcsn(&(0x7f0000001a80)='/dev/vcs#\x00', 0x400, 0x20040) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000001b80)={0x1, 0x0, {0x3ff, 0x2, 0x201b, 0x2, 0x0, 0x6, 0x1, 0x4}}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001c00)={'filter\x00', 0x47, "c98352c7d6439778cf49d1dd4bedb55ddbb0a9997f189ba38bf9d66bdc4d337aa55d02637385fca92c4126c6654a1c860a20342d11474f7bb4f904bfb67bd0986cc326d96de24f"}, &(0x7f0000001c80)=0x6b) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000001cc0)=0x1, 0x4) delete_module(&(0x7f0000001d00)='^\\\x00', 0x200) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001e00)={'ip6gre0\x00', &(0x7f0000001d80)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x9, 0x1, 0x2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7, 0x1, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001e80)={'ip_vti0\x00', &(0x7f0000001e40)={'erspan0\x00', r8, 0x7, 0x7800, 0x5dd6, 0x120, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0xc, "b4263f197a59fc59904a"}]}}}}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001ec0)={0x73622a85, 0x315, 0x3}) 21:46:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x10) 21:46:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x11) 21:46:25 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x20002}, 0x86, 0x0, 0x0, 0x0, 0x20, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) getsockname$qrtr(r1, &(0x7f0000000580), &(0x7f00000005c0)=0xc) sendmsg$xdp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="0ef4d94a6dc5407f746c976b0aed2817fdced92140e8bfa68dcab6c68b7d871da441fff0ec34f998fd416e302a124bed475b911d34fe96ead9f44a600fe474d733ddcca3eae3cf34e487f1cbf8107aed98cb57823f41597131ea39eb6dfef7ba3a656d85ae4eb0367495603241f1122f6ecd4ac93828e9c96cb9b665021d60394dc78f3335daa77a25c547166c67a59f4504e3ce4f9c5eed830443de2b241b7f3d2426a744e1ef2935e88772dcf403658c7b66195b80ae", 0xb7}, {&(0x7f0000000280)="23b5f86aa23ce5fed96e40a4a2a19ee0597a5b3b177a46c05a1c72b3ecb09378985b3fe289259b07a352f56d8a8942a75adeffb61a42db3f4fd8543b946db09ef9d4c542658fd0538645b1107b8b6c2a387d43ce2711b35523006b2130c609c0588b693731cce8d0cf0ab670a95542f1bf870017e1767da6eb355f1445aa7ccba85207caed38f603cea6c00679304739d1cfdfb1aed6367d38038154d9f38006991923515d544d8f7e50855de1fc7036154c912411e863294302cd3842e67cd867e3e2f7f52d7d032a3e69ce86354fa4f21103d98464cda777c02cdf9541bbaca3908bae", 0xe4}, {&(0x7f0000000040)="aa49a277db49a3e48b16872a0a040cd2e8bb66e1b7d918c9e4cdf40cad7ddce8", 0x20}, {&(0x7f0000000380)="f6a8e5097b0d212fa4eae910d32d9e9b122310190d3cc348752606b10a9ac8b9728576bbb0a1abd0a7d5bf7c5c7c1d571cbaa286857104b9756de9eab20786f10a30bb14682d2efeab528399fa309644e8c11a911d4da35fe20609509823b17b5eb87170bf309a299bba58e3e30e63c762e6f1b6530179ff3f61925fe030e798cbf123af79f5959b078c8c307f0801cc9879edbc0f2e27c988c269bdca0fc7a5c9c2d34d601771a3074c685a2227b0bf3944036ec626fda0c91942b52962192f37c6d04027eb0991f52ee43c", 0xcc}, {&(0x7f0000000080)="5f3c00b85f2a9a0501f677b1b741994a61a4fb1379c8ad789ca0059cd61c772d", 0x20}], 0x5, 0x0, 0x0, 0x80}, 0xc0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={r4, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={r4, 0x9}, &(0x7f0000000640)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r5, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) io_destroy(r5) 21:46:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x12) 21:46:25 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}], {}, [{0x8, 0x0, r4}], {0x10, 0x5}, {0x20, 0x4}}, 0x4c, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r6 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32], 0x3c, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='fuse\x00', 0x4028, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030302c757365725f132a3753d5c6afd769643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000000000,allow_other,default_permissions,allow_other,permit_directio,defcontext=user_u,obj_user=0000:00:10.0\x00,func=CREDS_CHECK,permit_directio,fowner>', @ANYRESDEC=r6, @ANYBLOB=',obj_role=netdevsim\x00,\x00']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}], {}, [{0x8, 0x0, r7}], {0x10, 0x5}, {0x20, 0x4}}, 0x4c, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, r4, r6, r7, 0x38, 0x1f}, 0x81, 0x35, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 487.796436][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:25 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) 21:46:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0xac39) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x632302, 0x5c, 0x7}, 0x18) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000200)={0x6, 0x0, 0x3, 0x80000001, 0x7, 0x2, 0x2}) [ 487.926819][T18406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:26 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) 21:46:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x13) 21:46:26 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r3, 0x2, 0x0) 21:46:26 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}], {}, [{0x8, 0x0, r4}], {0x10, 0x5}, {0x20, 0x4}}, 0x4c, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r6 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32], 0x3c, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='fuse\x00', 0x4028, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030302c757365725f132a3753d5c6afd769643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000000000,allow_other,default_permissions,allow_other,permit_directio,defcontext=user_u,obj_user=0000:00:10.0\x00,func=CREDS_CHECK,permit_directio,fowner>', @ANYRESDEC=r6, @ANYBLOB=',obj_role=netdevsim\x00,\x00']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}], {}, [{0x8, 0x0, r7}], {0x10, 0x5}, {0x20, 0x4}}, 0x4c, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, r4, r6, r7, 0x38, 0x1f}, 0x81, 0x35, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:46:26 executing program 4: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) 21:46:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x14) [ 488.385612][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x15) 21:46:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x480, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='[\xca\x00') getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 21:46:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x16) 21:46:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x17) [ 488.955251][T18465] 8021q: adding VLAN 0 to HW filter on device batadv0 21:46:26 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) 21:46:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x18) [ 489.363417][T18471] 8021q: adding VLAN 0 to HW filter on device batadv0 21:46:27 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) 21:46:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x19) 21:46:27 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) 21:46:27 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r3, 0x2, 0x0) 21:46:27 executing program 4: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) pipe(&(0x7f00000000c0)) 21:46:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x1a) 21:46:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x1b) 21:46:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x1c) 21:46:27 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 21:46:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x1d) 21:46:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x1e) 21:46:28 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)) 21:46:28 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 21:46:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x21) 21:46:28 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) 21:46:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x22) 21:46:28 executing program 4: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) 21:46:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x23) 21:46:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x24) 21:46:28 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) 21:46:29 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r3, 0x2, 0x0) 21:46:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x25) 21:46:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x26) 21:46:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x27) 21:46:29 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r3, 0x2, 0x0) 21:46:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x28) 21:46:29 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 21:46:29 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:46:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x29) 21:46:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2a) 21:46:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2b) 21:46:30 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) 21:46:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2c) 21:46:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2d) [ 492.600047][ T12] usb 5-1: new high-speed USB device number 15 using dummy_hcd 21:46:30 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:30 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) 21:46:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2e) [ 492.869943][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 493.000118][ T12] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 493.020064][ T12] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.038170][ T12] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.048543][ T12] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 493.068423][ T12] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.089826][ T12] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 493.105239][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.127654][ T12] usb 5-1: config 0 descriptor?? 21:46:31 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) fcntl$setflags(r3, 0x2, 0x0) 21:46:31 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) [ 493.499901][ T12] usbhid 5-1:0.0: can't add hid device: -71 [ 493.506044][ T12] usbhid: probe of 5-1:0.0 failed with error -71 [ 493.518257][ T12] usb 5-1: USB disconnect, device number 15 21:46:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:46:31 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)) 21:46:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2f) 21:46:31 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:31 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)) 21:46:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x30) 21:46:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x31) 21:46:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x32) 21:46:32 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) 21:46:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x33) 21:46:32 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x34) [ 494.599753][T13769] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 494.839628][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 494.959638][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 494.970529][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.982727][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.993118][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 495.006692][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 495.013833][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 495.023488][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.034430][T13769] usb 5-1: config 0 descriptor?? 21:46:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:46:33 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x35) 21:46:33 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) 21:46:33 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) 21:46:33 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) socket(0x100000000011, 0x2, 0x0) pipe(&(0x7f00000000c0)) [ 495.399844][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 495.409045][T13769] usbhid: probe of 5-1:0.0 failed with error -71 21:46:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x36) [ 495.505030][T13769] usb 5-1: USB disconnect, device number 16 21:46:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x37) 21:46:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x38) 21:46:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x39) 21:46:33 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:33 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) [ 496.061684][T13769] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 496.319329][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 496.442525][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 496.453360][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.464306][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.474211][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 496.487144][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 496.493837][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 496.502935][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.516787][T13769] usb 5-1: config 0 descriptor?? 21:46:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:46:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x3a) 21:46:34 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:34 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:34 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:34 executing program 0: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x41c3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a022, 0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000500), 0x5d, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, 0x0, 0x4044840) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x5d, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0009d8b517dd49ad415c1ea35bf478160000d0d91432ab7839120ce17251c1e8e9e108462893be0482a6a9092f30079f611eb51b7aeebf39faaf8ed7344b0cfbe659105681f80c6c9f36073b5601042bb040cb928c808eace5591c86fff83dfb53cd"], 0x59, 0x2) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x5, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000100)="0d74bbfca30942caed7aec7897aa772682a376f9fdd58c4b2130d9") fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x20000008, r1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getpeername$inet6(r5, 0x0, &(0x7f0000000240)) 21:46:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x3b) [ 496.879378][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 496.886881][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 496.904741][T13769] usb 5-1: USB disconnect, device number 17 21:46:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x3c) 21:46:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x3d) 21:46:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x3e) 21:46:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x41) 21:46:35 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) [ 497.871079][ T0] NOHZ: local_softirq_pending 08 [ 498.029414][T16246] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 498.279114][T16246] usb 5-1: Using ep0 maxpacket: 16 [ 498.399185][T16246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 498.409939][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.421958][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.438105][T16246] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 498.451066][T16246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 498.457662][T16246] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 498.466821][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.478792][T16246] usb 5-1: config 0 descriptor?? [ 498.528923][ T0] NOHZ: local_softirq_pending 08 21:46:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 21:46:36 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x42) 21:46:36 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:36 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:36 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x43) [ 498.849064][T16246] usbhid 5-1:0.0: can't add hid device: -71 [ 498.855221][T16246] usbhid: probe of 5-1:0.0 failed with error -71 [ 498.880856][T16246] usb 5-1: USB disconnect, device number 18 21:46:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x44) 21:46:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x45) 21:46:37 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) getpid() r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x46) 21:46:37 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 499.279068][T16246] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 499.524699][T16246] usb 5-1: Using ep0 maxpacket: 16 [ 499.648987][T16246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 499.659773][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.670954][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.681011][T16246] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 499.694153][T16246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 499.700842][T16246] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 499.710032][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.725132][T16246] usb 5-1: config 0 descriptor?? [ 500.109155][T16246] usbhid 5-1:0.0: can't add hid device: -71 [ 500.115256][T16246] usbhid: probe of 5-1:0.0 failed with error -71 [ 500.127637][T16246] usb 5-1: USB disconnect, device number 19 21:46:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) 21:46:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x47) 21:46:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:38 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:38 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:38 executing program 0: socket$inet(0x10, 0x0, 0x3) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="03000000b2b30535976ae695244f629f8de22abc8ed54c4551229461232b029075e6e2c308fe1e58b584829921ab906e15cfd42e5525f63d15a5a544ffc98d4b73c97e593517994f0a255df592dcc3024b98850edd5e06a801851da4fadb87b2bfa18c5b24259cffaa2b7966261d97d1e1a3041b38d26a112f05658a3cb6a33c23f36e7493d0e63924a200a350aa10f1151934f66244ab4a241d0e5f6d7cdea9c4cf058074556ef1f2353af70c64f2470300000000000000000000007a000000020000008e28595cedd12d31c178a3af192708b937e79a3bdd34c965697ea8ee770ffbb3e3cbafa67a14df25af4d6a8968a508057dd433babe5a29f23b89d2b8f3309c1cf71764bfd023030f7365ebb5ea"]}) socket$inet6_udplite(0xa, 0x2, 0x88) listen(0xffffffffffffffff, 0x0) 21:46:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 21:46:38 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x48) 21:46:38 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x49) 21:46:38 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 500.879242][ T8194] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 500.988813][T16246] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 501.118813][ T8194] usb 5-1: Using ep0 maxpacket: 16 [ 501.228642][T16246] usb 1-1: Using ep0 maxpacket: 16 [ 501.239671][ T8194] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 501.250486][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.262537][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.272893][ T8194] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 501.286445][ T8194] usb 5-1: config 0 interface 0 has no altsetting 0 [ 501.293636][ T8194] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 501.303266][ T8194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.316556][ T8194] usb 5-1: config 0 descriptor?? [ 501.359686][T16246] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 501.376261][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.387254][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.397124][T16246] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 501.410063][T16246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.416658][T16246] usb 1-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 501.425759][T16246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.434710][T16246] usb 1-1: config 0 descriptor?? [ 501.658688][ T8194] usbhid 5-1:0.0: can't add hid device: -71 [ 501.664691][ T8194] usbhid: probe of 5-1:0.0 failed with error -71 [ 501.678396][ T8194] usb 5-1: USB disconnect, device number 20 21:46:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 21:46:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4a) 21:46:39 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x265) 21:46:39 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) [ 502.588492][ T8092] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 502.858411][ T8092] usb 5-1: Using ep0 maxpacket: 16 [ 503.013358][ T8092] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 503.024092][ T8092] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.036131][ T8092] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.046532][ T8092] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 503.060026][ T8092] usb 5-1: config 0 interface 0 has no altsetting 0 [ 503.066612][ T8092] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 503.077158][ T8092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.086475][ T8092] usb 5-1: config 0 descriptor?? [ 503.428450][ T8092] usbhid 5-1:0.0: can't add hid device: -71 [ 503.434514][ T8092] usbhid: probe of 5-1:0.0 failed with error -71 [ 503.446701][ T8092] usb 5-1: USB disconnect, device number 21 21:46:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 21:46:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4b) 21:46:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:41 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:41 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) [ 503.772609][T16246] usbhid 1-1:0.0: can't add hid device: -71 [ 503.781158][T16246] usbhid: probe of 1-1:0.0 failed with error -71 [ 503.825499][T16246] usb 1-1: USB disconnect, device number 23 21:46:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:41 executing program 1: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4c) 21:46:41 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:41 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:41 executing program 1: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) [ 504.299923][T16246] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 504.458223][T13769] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 504.578308][T16246] usb 1-1: Using ep0 maxpacket: 16 [ 504.698286][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 504.718316][T16246] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 504.729085][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.740316][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.750344][T16246] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 504.763549][T16246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.770309][T16246] usb 1-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 504.779658][T16246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.788705][T16246] usb 1-1: config 0 descriptor?? [ 504.819352][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 504.832362][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.857030][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.870968][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 504.884484][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.891715][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 504.901527][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.912840][T13769] usb 5-1: config 0 descriptor?? [ 505.248132][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 505.254135][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 505.267909][T13769] usb 5-1: USB disconnect, device number 22 21:46:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4d) 21:46:44 executing program 1: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:44 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:44 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x265) 21:46:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) [ 506.828358][T16246] usbhid 1-1:0.0: can't add hid device: -71 [ 506.834439][T16246] usbhid: probe of 1-1:0.0 failed with error -71 [ 506.852391][T16246] usb 1-1: USB disconnect, device number 24 21:46:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4e) 21:46:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x4f) 21:46:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) [ 507.117982][ T8092] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 507.368010][ T8092] usb 5-1: Using ep0 maxpacket: 16 [ 507.427878][T16246] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 507.487969][ T8092] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 507.498783][ T12] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 507.506391][ T8092] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.519775][ T8092] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.530366][ T8092] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 507.544368][ T8092] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.552451][ T8092] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 507.562071][ T8092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.571860][ T8092] usb 5-1: config 0 descriptor?? [ 507.667943][T16246] usb 1-1: Using ep0 maxpacket: 16 [ 507.737794][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 507.788779][T16246] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 507.799673][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.811476][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.821553][T16246] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 507.835438][T16246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.843841][T16246] usb 1-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 507.853320][T16246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.861551][ T12] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 507.872845][ T12] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.884212][T16246] usb 1-1: config 0 descriptor?? [ 507.893081][ T12] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.907388][ T12] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 507.926871][ T12] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.934127][ T12] usb 2-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 507.943912][ T8092] usbhid 5-1:0.0: can't add hid device: -71 [ 507.951232][ T8092] usbhid: probe of 5-1:0.0 failed with error -71 [ 507.963525][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.973816][ T8092] usb 5-1: USB disconnect, device number 23 [ 507.985832][ T12] usb 2-1: config 0 descriptor?? [ 508.247817][T16246] usbhid 1-1:0.0: can't add hid device: -71 [ 508.254196][T16246] usbhid: probe of 1-1:0.0 failed with error -71 [ 508.268896][T16246] usb 1-1: USB disconnect, device number 25 [ 508.328811][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 508.334780][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 508.350108][ T12] usb 2-1: USB disconnect, device number 20 21:46:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:46 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) getpid() r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:46 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x50) 21:46:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:46 executing program 2: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x51) 21:46:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x52) 21:46:46 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) 21:46:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x53) [ 509.067994][T16246] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 509.107815][ T8194] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 509.317813][T16246] usb 1-1: Using ep0 maxpacket: 16 [ 509.377595][ T8194] usb 5-1: Using ep0 maxpacket: 16 [ 509.437656][T16246] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 509.448770][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.459707][T16246] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.469988][T16246] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 509.482900][T16246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 509.489549][T16246] usb 1-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 509.498632][T16246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.508375][ T8194] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 509.510557][T16246] usb 1-1: config 0 descriptor?? [ 509.524071][ T12] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.525734][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.569417][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.586506][ T8194] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 509.605854][ T8194] usb 5-1: config 0 interface 0 has no altsetting 0 [ 509.613136][ T8194] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 509.622846][ T8194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.635351][ T8194] usb 5-1: config 0 descriptor?? [ 509.787558][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 509.897675][T16246] usbhid 1-1:0.0: can't add hid device: -71 [ 509.903693][T16246] usbhid: probe of 1-1:0.0 failed with error -71 [ 509.911037][ T12] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 509.923304][T16246] usb 1-1: USB disconnect, device number 26 [ 509.934152][ T12] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.948658][ T12] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.959865][ T12] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 509.973067][ T12] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.983359][ T12] usb 2-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 509.992536][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.997490][ T8194] usbhid 5-1:0.0: can't add hid device: -71 [ 510.007068][ T12] usb 2-1: config 0 descriptor?? [ 510.011490][ T8194] usbhid: probe of 5-1:0.0 failed with error -71 [ 510.030333][ T8194] usb 5-1: USB disconnect, device number 24 21:46:48 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) close(r1) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x5}, {0xe99}]}, 0x18, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, 0x0, 0x800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:46:48 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x54) 21:46:48 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x265) 21:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) [ 510.357486][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 510.363497][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 510.377445][ T12] usb 2-1: USB disconnect, device number 21 21:46:48 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x55) 21:46:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000340)=""/248, 0x17}], 0xf8) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000072000032eb00"}) r3 = syz_open_pts(r2, 0x2002) dup3(r3, r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x2000000080803, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 21:46:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x56) [ 510.807342][ T8194] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 511.067374][ T8194] usb 5-1: Using ep0 maxpacket: 16 21:46:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000140)={0x20071026, r3}, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x32e4, 0x8, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1410, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x200408d5) 21:46:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x57) 21:46:48 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) getpid() r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 511.198380][ T8194] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 511.221654][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:46:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) [ 511.221671][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.221693][ T8194] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 511.221709][ T8194] usb 5-1: config 0 interface 0 has no altsetting 0 21:46:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) [ 511.221738][ T8194] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 511.221755][ T8194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.241682][ T8194] usb 5-1: config 0 descriptor?? [ 511.577569][ T8194] usbhid 5-1:0.0: can't add hid device: -71 [ 511.584968][ T8194] usbhid: probe of 5-1:0.0 failed with error -71 [ 511.600509][ T8194] usb 5-1: USB disconnect, device number 25 [ 511.618080][T13769] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 511.857214][T13769] usb 2-1: Using ep0 maxpacket: 16 21:46:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x58) 21:46:49 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000000c0)="00f1aa234b1f42abccd9aa167805df54129981852bf13b0b6c74", 0x1a, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:49 executing program 2: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:49 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') setns(0xffffffffffffffff, 0x0) 21:46:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) [ 511.977310][T13769] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 511.988174][T13769] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.000610][T13769] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.043858][T13769] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 21:46:49 executing program 2: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) [ 512.110050][T13769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.110085][T13769] usb 2-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 512.110101][T13769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.128842][T13769] usb 2-1: config 0 descriptor?? [ 512.401013][ T8194] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 512.467247][T13769] usbhid 2-1:0.0: can't add hid device: -71 [ 512.473311][T13769] usbhid: probe of 2-1:0.0 failed with error -71 [ 512.485598][T13769] usb 2-1: USB disconnect, device number 22 [ 512.647103][ T8194] usb 5-1: Using ep0 maxpacket: 16 [ 512.768011][ T8194] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 512.778887][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.790987][ T8194] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.801421][ T8194] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 512.814934][ T8194] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.822119][ T8194] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 512.831862][ T8194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.843879][ T8194] usb 5-1: config 0 descriptor?? 21:46:50 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x32}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 21:46:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:50 executing program 2: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty=[0x4], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1d0040", 0xc, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 21:46:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x59) 21:46:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5a) 21:46:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0xff31, [], 0xfffffffffffffd4d, 0x0, 0x0}, &(0x7f0000000100)=0xa8) 21:46:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) 21:46:50 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) [ 513.187147][ T8194] usbhid 5-1:0.0: can't add hid device: -71 [ 513.193262][ T8194] usbhid: probe of 5-1:0.0 failed with error -71 [ 513.211091][ T8194] usb 5-1: USB disconnect, device number 26 21:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x400000, 0x0) 21:46:51 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e000909"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:46:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5b) 21:46:51 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:51 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5c) 21:46:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x265) 21:46:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) semop(0x0, &(0x7f00000000c0)=[{}, {}, {}], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:51 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$packet(0x11, 0x0, 0x300) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100004, 0x0) [ 513.996909][ T3088] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 514.256940][ T3088] usb 5-1: Using ep0 maxpacket: 16 [ 514.377160][ T3088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 514.388286][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.399683][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.409508][ T3088] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 514.423689][ T3088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 514.431134][ T3088] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 514.441132][ T3088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.454481][ T3088] usb 5-1: config 0 descriptor?? [ 514.816882][ T3088] usbhid 5-1:0.0: can't add hid device: -71 [ 514.822953][ T3088] usbhid: probe of 5-1:0.0 failed with error -71 [ 514.835333][ T3088] usb 5-1: USB disconnect, device number 27 21:46:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5d) 21:46:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 21:46:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) tee(r1, r0, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 21:46:53 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x14440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50930, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x149042, 0x102) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) r2 = gettid() tkill(r2, 0x37) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0xff, 0x1}, &(0x7f00000006c0)) [ 515.285849][T19426] xt_CT: No such helper "pptp" 21:46:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x98, 0x98, 0x98, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) [ 515.323445][T19426] xt_CT: No such helper "pptp" 21:46:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5e) 21:46:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xffffff2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) [ 515.413435][T19442] Cannot find add_set index 0 as target 21:46:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x265) 21:46:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x5f) [ 515.646716][T13769] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 515.896754][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 516.030189][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 516.049062][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.060447][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.070622][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 516.084135][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 516.091130][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 516.114282][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.123626][T13769] usb 5-1: config 0 descriptor?? [ 516.467598][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 516.473654][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 516.481767][T13769] usb 5-1: USB disconnect, device number 28 21:46:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) 21:46:54 executing program 5: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x60) 21:46:54 executing program 0: open(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x20}, 0x20}}, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x48, 0x1402, 0x100, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) sendfile(r3, r3, 0x0, 0x8080fffffffe) 21:46:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 21:46:54 executing program 5: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x61) 21:46:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 21:46:54 executing program 5: syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x265) 21:46:55 executing program 2: creat(0x0, 0x0) socket(0x10, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1100000042000506000000366a"], 0x14}}, 0x0) 21:46:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x62) [ 517.286935][T13769] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 517.546682][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 517.667226][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 517.678025][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.688988][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.698859][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 517.712456][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.714684][ T0] NOHZ: local_softirq_pending 08 [ 517.719170][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 517.733824][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.743339][T13769] usb 5-1: config 0 descriptor?? [ 518.086534][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 518.092570][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 518.101239][T13769] usb 5-1: USB disconnect, device number 29 21:46:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) syz_genetlink_get_family_id$nl80211(0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}) ioctl$KVM_SET_CPUID(r4, 0xae80, 0x0) 21:46:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x63) 21:46:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/129) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={0x0, 0x2e, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x20002154}}, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="4e7d6da8b12c8955d913b9a7bb59e560792f5a8a791b938090ce8109e686c9da2550c8698963f40b931e4452de1a4400ab24c724dfea593c59fb8ad3dd0ccda33a9ba130ba4b4c6a0d694e500ade04055c9ffb33acdacaaeceed87eaa4663b9f3b5246c59a2c210daa5ec27d32f46429b1266206e98d6f125499746fad5a189af11bedb38e95a8616cf012748af695952b6baeb62ad344883be3047416f048f5d1645225ab55cc0f2750b1977c919fc2ce56b68421071259b2ae7b0e997928fdef35069dd226012d591c61686bb1f2e5b8033b754106b6a367e27fb4f5df5edd08ea32fd07cf9062510a4baca3523f6d", 0xf0) 21:46:56 executing program 0: getrlimit(0x17, 0x0) 21:46:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:56 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 21:46:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x64) 21:46:56 executing program 2: 21:46:56 executing program 1: 21:46:56 executing program 2: [ 518.751947][T19558] 8021q: VLANs not supported on lo [ 518.966396][T13769] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 519.226257][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 519.346578][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 519.360506][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.371777][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.384915][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 519.401510][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 519.408181][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 519.421150][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.430541][T13769] usb 5-1: config 0 descriptor?? [ 519.766317][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 519.772589][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 519.781304][T13769] usb 5-1: USB disconnect, device number 30 21:46:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) syz_genetlink_get_family_id$nl80211(0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:57 executing program 1: 21:46:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x65) 21:46:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 21:46:57 executing program 0: 21:46:57 executing program 2: 21:46:58 executing program 1: 21:46:58 executing program 0: 21:46:58 executing program 2: 21:46:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x66) 21:46:58 executing program 5: 21:46:58 executing program 1: [ 520.646120][T16243] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 520.896042][T16243] usb 5-1: Using ep0 maxpacket: 16 [ 521.016071][T16243] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 521.026850][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.038314][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.048151][T16243] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 521.061120][T16243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.067966][T16243] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 521.077139][T16243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.089653][T16243] usb 5-1: config 0 descriptor?? [ 521.426099][T16243] usbhid 5-1:0.0: can't add hid device: -71 [ 521.432136][T16243] usbhid: probe of 5-1:0.0 failed with error -71 [ 521.442784][T16243] usb 5-1: USB disconnect, device number 31 21:46:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:46:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000dc01200000000000000000000006ba00"}) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) 21:46:59 executing program 5: 21:46:59 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) 21:46:59 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getpeername$inet6(r0, 0x0, &(0x7f00000001c0)) 21:46:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x67) 21:46:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8c220200, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x9c}}, 0x0) 21:46:59 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in, @in=@local}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8219}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) 21:46:59 executing program 0: clone(0x20000105dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0x11000000}], 0x400000000000132, 0x4000000) 21:46:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x68) 21:46:59 executing program 5: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) [ 522.018551][T19636] device vlan2 entered promiscuous mode 21:46:59 executing program 0: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) [ 522.065138][T19642] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 522.136945][T19654] device vlan2 entered promiscuous mode [ 522.315999][T16243] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 522.556944][T16243] usb 5-1: Using ep0 maxpacket: 16 [ 522.686274][T16243] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 522.700412][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.711512][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.724708][T16243] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 522.741296][T16243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 522.748227][T16243] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 522.760710][T16243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.770082][T16243] usb 5-1: config 0 descriptor?? [ 523.115828][T16243] usbhid 5-1:0.0: can't add hid device: -71 [ 523.121918][T16243] usbhid: probe of 5-1:0.0 failed with error -71 [ 523.133135][T16243] usb 5-1: USB disconnect, device number 32 21:47:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100000000, 0x0, 0x80000001, 0x800}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:01 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) close(r1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) 21:47:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x69) 21:47:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000070000000000000000000006040000000000000000000002010000000000000001000004000000020000000001"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) 21:47:01 executing program 2: clone(0x20000105dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x4e001, 0x0) 21:47:01 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000001240)=0x41) 21:47:01 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001040000000000000000000000000800094000000000050001"], 0x44}}, 0x0) 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6a) 21:47:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 21:47:01 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x1110, 0x0) 21:47:01 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) [ 524.045706][T13769] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 524.285639][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 524.415928][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 524.427013][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.438993][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.449388][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 524.462909][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 524.470167][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 524.479951][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.490382][T13769] usb 5-1: config 0 descriptor?? [ 524.825636][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 524.831784][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 524.843325][T13769] usb 5-1: USB disconnect, device number 33 21:47:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000020100000000000000010000050000000200000000020000000b"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) 21:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6b) 21:47:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 21:47:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x5802, 0x294, 0x2a03, 0x294, 0x340, 0x378, 0x378, 0x340, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x98, 0x0, 0xd, 0x0, 0x6c, 0x66], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'vlan1\x00'}, 0x0, 0x230, 0x258, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'gre0\x00', {0x100000000000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a2) 21:47:03 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000001380)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 21:47:03 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)={0x0, 0x8}) socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x100000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) unshare(0x40000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6c) [ 525.301917][T19744] xt_hashlimit: overflow, try lower: 17592186044416/5 [ 525.308102][T19740] new mount options do not match the existing superblock, will be ignored [ 525.339538][T19749] xt_hashlimit: overflow, try lower: 17592186044416/5 21:47:03 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 21:47:03 executing program 5: openat$snapshot(0xffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x401, 0x0) [ 525.386879][T19740] new mount options do not match the existing superblock, will be ignored 21:47:03 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 525.448794][T19755] IPVS: ftp: loaded support on port[0] = 21 21:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6d) [ 525.676094][T16246] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 525.700113][T19760] IPVS: ftp: loaded support on port[0] = 21 [ 525.767074][ T62] tipc: TX() has been purged, node left! [ 525.925543][T16246] usb 5-1: Using ep0 maxpacket: 16 [ 526.045542][T16246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 526.056357][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.067777][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.077979][T16246] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 526.091133][T16246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 526.097910][T16246] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 526.107474][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.120112][T16246] usb 5-1: config 0 descriptor?? [ 526.456979][T16246] usbhid 5-1:0.0: can't add hid device: -71 [ 526.463019][T16246] usbhid: probe of 5-1:0.0 failed with error -71 [ 526.486732][T16246] usb 5-1: USB disconnect, device number 34 21:47:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6e) 21:47:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8c220200, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x9c}}, 0x0) 21:47:04 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setreuid(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000800)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002f00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000002f00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x101}}], 0x18}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0x0, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x101}}], 0x18}}], 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x4000000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000"], 0x14}], 0x1, 0x0) 21:47:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x5, 0x0) r3 = socket(0x1e, 0x2, 0x0) bind(r3, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r2, &(0x7f00000000c0)=@name, 0x10) close(r3) 21:47:04 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:47:04 executing program 0: clone(0x20000105dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) 21:47:04 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, {0xa, 0x4e24, 0xd148, @rand_addr=' \x01\x00', 0x20}}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8c220200, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x9c}}, 0x0) 21:47:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34325258}) 21:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x6f) 21:47:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xe7, 0x34325258}) 21:47:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x240, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) [ 527.275294][T16243] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 527.526219][T16243] usb 5-1: Using ep0 maxpacket: 16 [ 527.645382][T16243] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 527.656229][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.667481][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.677517][T16243] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 527.690694][T16243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 527.697603][T16243] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 527.707228][ T62] tipc: TX() has been purged, node left! [ 527.707703][T16243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.721661][T16243] usb 5-1: config 0 descriptor?? [ 528.065245][T16243] usbhid 5-1:0.0: can't add hid device: -71 [ 528.071319][T16243] usbhid: probe of 5-1:0.0 failed with error -71 [ 528.080053][T16243] usb 5-1: USB disconnect, device number 35 21:47:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000200)=""/42) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='syzkaller1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) close(r2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x8) dup(0xffffffffffffffff) 21:47:06 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r1, &(0x7f0000000540)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@dccp={{0x6, 0x4, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "c80005"}}}}}, 0xfdef) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r3, &(0x7f0000001340)="c1542c23e2fbb332579365f723d89cd79bd7bd4b5c35dd3d3709f0381ae8098f9ad08b199140efb514e588e65824900adb1f283b0f05ba3afb390fe096d96099d21fb7697876574ba56efc797b794a705e0e78fcb5e17308f63e9908f71e4344f19c9c828c1635efcbe9be90040562373b72d4a2d95d50338f510297040a5843edd677993f9e2379b07dcc3fbf86e8d152f894ffbf5fe992e7b9e1146107f939d7ef9b0cb8cebb17667cc29c8863956f0fd4847b4aa91537ff4f0133c86487ab2e6a9b5e3eba62e62daa952a0c71693e6a5413cf36c9191430d87bab00c690905e0d35aa838ee615439f0203fb0a443e140b63b9e78f3b7bf2a14979db2d05067863985eb402eeeaa154045272d10db7c690255e349b467f7484392cbc3f8775d8402d093a874d714d2f9bf08e8faae7cf89ad2b3ee32e023406c0817c776323ee0c621057bd859fe382724b9577c6bfe78cab9fb2bebe9dcd2197f0d8376f25ee4a7984726a91c29db11cc52c00165c915064231dccbad9769ae3846a8ec161dbc73dae12c1a0c912757cbabc4b0c27cf3a54241656f6ff8f6d1c261b9a4a5d720e234904adbb09c171c88272e15a952f06ff6db235a9c61bf440e310b381e912764c18617c8de78cf16dae3f00fe7929980b2c01fea327b18cbe93675374b7c3f616907bff2b3d3849e52a203d471d9dcdc9ee4bf92ef9967d8ccd8d4d330a68eaa5032b2252b5eb36aef20e1ea39d0b2fd10c6e0c924f94048cb2bbc8d191675f0984e1f47635ea658b8de45c09a488c734cdb58b49798cc6df0ae64218f6404e32a1e0e730580001bf8464681e6e4f14e180028063ac68eefbb652cd95881313b08e9b65f115303318bbc9750f0afcab96d5ba4fa7c9cc8dea37ae3590b02d1c6af5630d82cfbefe813ba9fb999c8104034cb3ccfb9b03225513931ce4de4786a4cd9b6da19b6e8be7989f650aa96bea0ad82a77b5b1475a7ac0a1b5254c31cc898c84e72475b0d98445e873ebbd5ce7182676b1af1d398e8971b99844eb50a1324bcb247753a57ecb7e195025c7af58f6d5f0649113f7195d463219761f0d39d981bc07119575581a143122bd42deec66efad415a5104ed69775795c9d207a78e10c7d0f3bff9292f982324063be57a2e404dfa09a70d65108b5375ec68b2be72b85c9ba08c198ecadb152a812c01a30819311b6223f94a7b9ab2696e96d1e8729683f06a04016c406e8860845c193972e42ae2e5659a6a60d5fa50eae74a2ab5d05d07c1f5f8677e78c6581d5f3ada47a9d9920fb6d57f7ffdb30d1e88a9e3155a0a396bdf1e766dea8a5adccc6bf326568b5a0a6fbc067cbfcf0f8bf9f3e46f7d43bb3a52626420a6c1b711b69c96f0a6593fc09b0f935eefd4aad5c78499952ae7167bc292b54846bcc5bf1326a4c649a1c12406c0c2a4e71863ad97d5d2a1fb82ab6e5284bf9bcf278caea6250da78bb766ce2c89b53b2bc8b30ccfb82b05c86c3b28e643719ba878550ff36a13d38f0e6af8a54cb8bc97eb98dcca32fb0ba93f793841f1f29030c99b928a357bacbdb18a95360aa55c57284834e917a7a7343c83d04e59a83d8ab956067ac5a2f4e0a3153ffe098d1efc365af2ecbb23bd54d9a117cfca25f8453103f573af7ff86a5ba7804dbbd87264bbdf4e5dae6c7b28900aea10b89504e466d17b6e9c8a6417db6de6d3cd192cbfb71fe2f0e01b81c1bc7d703ba3d5c14535de1988a489ba29cdea8406e04d9bcedb51683ed3068b54b4db0e7f9991cf08ea6d4656cc87e649f7e3b27fe4e8c8dc63a1a4069aca7162b7435c9392a75a444c230c1982e0abcb72385db6adff7f3d854cd8e073ae992b72dcdc7e060efb249eb37069b6d1517b7a1c586174cce35541bc405f949d5e9eb386bd9d231736d6e7115f8b2229d1fb0ed08d2f5a4e39c24940ba9fc40efc69c5c2200b8f25ba8e7ae68a13d57e97547596d4d43bc320942082280e2153b2bbb196d43927382642203d96d766ea630b4ee2492434dbb14cba1e6ca73221375406fb3499dc86b3878e3d0b5001b686ac43f32de45a3430b64dd4684d560f21e7084571e7400e88b5203c7cfc295200aca3a1e30aa603aabc9620c664b2595918308fdf7d6e5fc66226f9b1a2181bb065e6c391e3fe198f821508f5ef39e2e2f08363c2d0f551d352363f6e10fac020fdbcc1b319990e672953d81c00fdf15eee87ad8bc01acda540f4960375766355f26a3377ec1264fdcfce737bf5024cfc3892f5deeb16bd12a01a00cf66045be60060d88d7e5fc7fe4f3a95a8345ec32454a77c2312eff61e604ff8e7dfac6b99b4d093eea9c0ca50824187b5423fdb46038f9d7c1846d76c98ea2f759322f5e3c126aa3b21f2e4d011dafd08c9d37194a38587233a17c50b7be74da9a122dedfe9df9b323e3f39dedcd0c32623f8a8eac3301341878d97bee90c544f2def4bf0c4fd47437a755f0abe0f1228381fe7a7d94dbb70ad309e49dcc08b9476e3abc4b5bfb1dc9b56e0c3824175565f0f9443406fd1d34a7902fdf5549076917a9df9bd5e69378fea22118a72192f4f2b7b82dc7a2cfd56ef5b549d086d60c18ab81a2bd90bb46c0db69b81925dd5d67c02b809ce79b3117de26ce83c15c9477de996f31b4575c2d3df997542bf076a3175bd9d43bd6b1f26b90b4b7246ae2b150a8f978d0432d0116f33a3ad28d95a8e46970c90ac12f5b7bcefee36b2f06c149057c020e8fff1e42a2cad542a8f0a3080949747e4475e3829bbb82239882af2a56da27413b77e88508855bca1ed6daf1f48a5acffa6c164f9c758c25ad7fca18ffd5f5905e87d4aad2cde6b34627081a207a15bd2816bb39ba12bfca5ea8f2283f3f6bc96e0a588e2ea03fb2c32c6981affcab0f34ab921096852bf4dc65715964186349cb52e7ea9b94bcabcddcda19c850103cf50779e72d731c7ee1559a22c27267e5d37a35a9917ebbdcfd1121be3d04bbab88822cbd318c27a4300eef12c679ecd605db12b0c6481f13204032960da1956de156b13a632cfb5b0cf012b5173795ff6d6052e8ee35f238f47ac1d73f8164419c54d9eb7b0283ab09d4fbee339014008982559b58bbe61b1a7f2b810c9e9b6fed316aff7cb47ae249193651780f46fd462a7263778f54dcb6ee6ee17f9151f9825a774a7b1d74da3819ad949d318389ba9678cb47b09df789d16d7e7938cfdd61d2f55b646160ee1c7846664642d4c96f3735083ad7c28046fbd01b727787ddfd0f76a945ed251a5cd54a57704df66e3328af2ffe63815e571be000059719a762443c53c92c5a019eacd1891608349464ac6d7a831e743f0273440490675e2ef0b6742a475d8765145b4bddf988ffc9753de038f555a38d1a20f82356dd670a1aad6b42901b81268c47fa1231e38828e6d008d2531a4e8e4fffb7dae2eeda65d4dc561832beccc8350d164389ed221f985d2033a3943861087195276ed077af3191607c69dc8d32bf924dc4f03e52e2bc1a7f5486c0d06b68fc20823b5c4b2dbf488613283eb3cfbf684f07dae861a51693716a84b5e0027fd0fe1705563c54b9061237ca2b2bbd0e4b1a62ea8b375fcc7015982649b419debf805fafcab1193f52c9c0b3bd0b6b02f61626f599b8c355e5948f2ea1a743f127d73ed1db0df0ca59683ba58a993ede2124dfd60b37683f36ef0f11afdf903896c701f33bb55cab1fd6178d42e8d2d8049b7333fc20cc294944a2da77004a918decfbdaa4983475075e86ce114a8fe28b8a6c3bba17326cf287f6d74cb75ef35651b27252107d3050b726556f993fe3da127a5d4ad4bdd00a85f796ee8bb9d966cb43583598aaa1b51a51cfdb48686fe7946b914ba67d8a544226c488ffbd82f2385b6685ac34496d54e271821bed6b8ba147b9c14bb88e123164491a77a83a714f7e994f39fdf9f07eec7d1860f9d76bbf31a72966b5e70ea16af3a046462c29dc170185eb1491277f824c912bfd230510f86ef6b80733b1b641501899b24971d795c847934b1dcd201faca38bdf5d9ecc64706554b8874314affc338223003bafae08a5d8993b24925360829dfc188f0d1d44d7f52493e02810ff4fc32fceb8101deacbca2dcbaff29a8fff915d2fdbd56d39d102db5d14375cfa4f7fa19bc28b90035561797699465113215e45fbd4ef67caa6f675199dcb4a44d9aeaba327eeb2e1ab69c5745434cd451e53a0151544c4dc580f0de891fe0fb773585299680aeb390855b12ae596e24255af7bf58d147a3eeebe8314424fa80cb0106bed1356842694372084e42a641315d2bcb540c4c96bbb5ec25b1a242270a579696b7c931e122ed89857478b0b4770e305e879fecc555478a72f107c06532d0c94f953974c44ba14675fc9c4de7003d8492a8889b27e39ecb9de8f27b4d58ca5fbb05ba5c1caacba1dcea98aeedb17e0806e2aae9a293ff5951950ccb8ad149c6caba8debcd805e134875db0dbddfaaad625e4ef05b7a38f2003603f213c37338284f71aa73847d1dd24c55fece7938e4dc2c0a2519b3abd90b065986800f2c186ecb2d6d2938ff3a194ffb5588d2dac86a04e9b12af0267930ec8f70f445558e52df2012f69748c84154728bc2101f34ade23d446a5404ab2a3a2dc7e3f09a4a2d2573f86dc4f5beee3cb78a50795fff4460f9db3defb52073b1adbb152aedfac2370941cfef4660087657be3fdb91de9410fe82469c8ac52eca96e5f84473e65f820c55551f198b21473f2fd887f0a68109a9b511d9062a289813e1df8f7bc12ca6a0722f1b837d6aa5d7ba4dd36768d577f9d5ceb2162912c60147e8f115e1cba4a31a010145486bc88d31959c911bf71cca14da3801d24e63d9f00e467bcf457fd7aa74d4aeeaced337fdbc4b8169121516b8b1c9d00592049754c1069b69e89727ebaf763c3e8c542c908fa9eeeea05f9c02baa98a48781cd00a4a8505d7b4eb05c85ee79303333015386fed5b288b0f35f4b007c4fe9a85ca4230b90b39f1d69b3d79c16c9c14bf9f3ffaf8d4fa077b1bf0a2dc2c4758cbf05bd7eb641932c24b27f6f48c0d65b6fd820cfa65ee4c1784570650e025ea275753357561ba7415beb113ccf79c738838ba0b533b323e30c9af4340084ad04642bffbda8dae77b772ec1f544b0f796a3f55123cba461638f2362ee507a82f0de7ffc4a56afe209fa9daf8bc3c9b9e8b76b5bff62274696a916970498bb8397388f3636565e1b030918e5f7c7f77ceeab1c1f14ccb0d78ce1bff8e139f4cd2c14f855587aa3c6fcc7132637d6aacf02ab28406400fa24b9280c97eafcf8ed49820b662d86fb9a82e4a698219bcd3be54298de9f532673502dc604296d9933a362228fbe3268477fdbaa8782d25974aef8398bb689ee865fbfcb4f0259a77a36e461f4e261043c535e8", &(0x7f0000000080)=""/45}, 0x20) 21:47:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x70) 21:47:06 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8c220200, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x9c}}, 0x0) 21:47:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000500)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ae78eeb4"}, 0x0, 0x0, @planes=0x0}) 21:47:06 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000001240)=0x41) 21:47:06 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8c220200, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x9c}}, 0x0) [ 528.578106][T19896] device vlan3 entered promiscuous mode [ 528.578117][T19896] device erspan0 entered promiscuous mode 21:47:06 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x4e001, 0x0) 21:47:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x71) 21:47:06 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r2, r3, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup2(r1, r4) 21:47:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x72) [ 528.975099][ T12] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 529.226394][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 529.355082][ T12] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 529.366079][ T12] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.379803][ T12] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.403014][ T12] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 529.425489][ T12] usb 5-1: config 0 interface 0 has no altsetting 0 [ 529.432172][ T12] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 529.447732][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.460562][ T12] usb 5-1: config 0 descriptor?? [ 529.805921][ T12] usbhid 5-1:0.0: can't add hid device: -71 [ 529.811950][ T12] usbhid: probe of 5-1:0.0 failed with error -71 [ 529.821788][ T12] usb 5-1: USB disconnect, device number 36 21:47:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) 21:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x73) 21:47:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000200)=""/42) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='syzkaller1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) close(r2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 21:47:08 executing program 0: r0 = socket(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 21:47:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c744872000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000008ab85b07d34d6e8000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x88) 21:47:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22901b30677c8100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000008009"], 0x80}}, 0x0) 21:47:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 21:47:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 21:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x74) 21:47:08 executing program 1: request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000004c0)='vmac64(aes-generic)\x00', 0x0) 21:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x75) 21:47:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x76) [ 530.664993][T13769] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 530.924761][T13769] usb 5-1: Using ep0 maxpacket: 16 21:47:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)) 21:47:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 531.055763][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 531.073238][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.086027][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.096904][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 531.110208][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 531.118233][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 531.127599][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.139334][T13769] usb 5-1: config 0 descriptor?? [ 531.484881][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 531.490934][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 531.501837][T13769] usb 5-1: USB disconnect, device number 37 21:47:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22901b30677c8100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000008009"], 0x80}}, 0x0) 21:47:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x77) 21:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 21:47:09 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x1b1, 0x8}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x100000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="b19a82a74aa6d4eb29c9626e38cb8538", 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) unshare(0x40000000) accept4(r1, 0x0, 0x0, 0x0) 21:47:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 21:47:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22901b30677c8100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000008009"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "89fda6e87678b76f"}}, 0x48}}, 0x0) 21:47:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x78) [ 531.984509][T20048] IPVS: ftp: loaded support on port[0] = 21 21:47:09 executing program 0: clone(0x20000105dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) 21:47:09 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xc63b9e35) 21:47:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f00000002c0)={0xa, 0x4e27, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x11, 0x32, {@private1}}}], 0x28}}], 0x2, 0x0) 21:47:10 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmdt(0x0) 21:47:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x79) [ 532.173355][T20057] IPVS: ftp: loaded support on port[0] = 21 21:47:10 executing program 2: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) inotify_rm_watch(r1, r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 21:47:10 executing program 0: pipe(&(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x94}}, 0x0) [ 532.304767][T13769] usb 5-1: new high-speed USB device number 38 using dummy_hcd 21:47:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000002000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 532.451052][ T25] tipc: TX() has been purged, node left! [ 532.539861][T20132] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 532.594800][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 532.689619][T20170] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 532.714709][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 532.731464][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.749558][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.760378][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 532.780418][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 532.791738][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 532.807107][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.817140][T13769] usb 5-1: config 0 descriptor?? [ 533.154636][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 533.160829][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 533.173267][T13769] usb 5-1: USB disconnect, device number 38 21:47:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8400, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcs\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 21:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7a) 21:47:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 21:47:11 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 21:47:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x94}}, 0x0) 21:47:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 533.692721][T20201] device vlan3 entered promiscuous mode 21:47:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f00000002c0)={0xa, 0x4e27, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0100"/29, @ANYRES32], 0x28}}], 0x2, 0x0) 21:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7b) 21:47:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x5}, {&(0x7f0000000140)}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de38", 0x62}], 0x3, 0x0, 0x0, 0x1a0}}], 0x1, 0x24004880) 21:47:11 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) mkdir(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 21:47:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x5802, 0x294, 0x2a03, 0x294, 0x340, 0x378, 0x378, 0x340, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x98, 0x0, 0xd, 0x0, 0x6c, 0x66], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'vlan1\x00'}, 0x0, 0x230, 0x258, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x5, 0x0, 0x0, 0x2, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a2) [ 533.938224][T20228] Cannot find add_set index 0 as target [ 534.035115][T20233] Cannot find add_set index 0 as target [ 534.044441][T16246] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 534.284377][T16246] usb 5-1: Using ep0 maxpacket: 16 [ 534.404699][T16246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 534.415593][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.427398][T16246] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.437229][T16246] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 534.450156][T16246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 534.456801][T16246] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 534.465896][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.489675][T16246] usb 5-1: config 0 descriptor?? [ 534.495258][ T25] tipc: TX() has been purged, node left! [ 534.834423][T16246] usbhid 5-1:0.0: can't add hid device: -71 [ 534.840473][T16246] usbhid: probe of 5-1:0.0 failed with error -71 [ 534.853396][T16246] usb 5-1: USB disconnect, device number 39 21:47:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7c) 21:47:13 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:47:13 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) 21:47:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000070000000000000000000006040000000000000000000002010030"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) 21:47:13 executing program 0: clone(0x20000105dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) 21:47:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$nl_generic(0x10, 0x3, 0x10) close(r1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) 21:47:13 executing program 5: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) 21:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7d) 21:47:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/221, 0xdd) 21:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7e) 21:47:13 executing program 0: [ 535.714323][T13769] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 535.974190][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 536.095027][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 536.123779][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.169587][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.212062][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 536.267804][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 536.295867][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 536.350590][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.406183][T13769] usb 5-1: config 0 descriptor?? [ 536.774202][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 536.781524][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 536.813572][T13769] usb 5-1: USB disconnect, device number 40 21:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:15 executing program 5: [ 537.624108][T13769] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 537.883946][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 538.007715][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 538.024127][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.047433][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.068528][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 538.106157][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.128698][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 538.156983][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.180124][T13769] usb 5-1: config 0 descriptor?? 21:47:16 executing program 2: sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) mkdir(0x0, 0x0) chdir(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) [ 538.534040][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 538.540189][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 538.555793][T13769] usb 5-1: USB disconnect, device number 41 21:47:16 executing program 1: 21:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x82) 21:47:16 executing program 0: 21:47:16 executing program 5: 21:47:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000200)=""/42) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='syzkaller1\x00'}) close(r2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 21:47:16 executing program 0: 21:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x83) 21:47:16 executing program 5: 21:47:16 executing program 1: 21:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:16 executing program 0: 21:47:16 executing program 5: 21:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x84) 21:47:16 executing program 1: 21:47:16 executing program 5: 21:47:16 executing program 0: [ 539.413789][T13769] usb 5-1: new high-speed USB device number 42 using dummy_hcd 21:47:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000200)=""/42) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='syzkaller1\x00'}) close(r2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 21:47:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x85) 21:47:17 executing program 1: 21:47:17 executing program 5: 21:47:17 executing program 0: [ 539.663720][T13769] usb 5-1: Using ep0 maxpacket: 16 [ 539.814713][T13769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 539.831296][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.845819][T13769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.855968][T13769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 539.869284][T13769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 539.876291][T13769] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 539.885833][T13769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.904483][T13769] usb 5-1: config 0 descriptor?? [ 540.256136][T13769] usbhid 5-1:0.0: can't add hid device: -71 [ 540.262170][T13769] usbhid: probe of 5-1:0.0 failed with error -71 [ 540.271544][T13769] usb 5-1: USB disconnect, device number 42 21:47:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:18 executing program 5: 21:47:18 executing program 0: 21:47:18 executing program 1: 21:47:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x86) 21:47:18 executing program 2: 21:47:18 executing program 5: 21:47:18 executing program 0: 21:47:18 executing program 1: 21:47:18 executing program 2: 21:47:18 executing program 0: 21:47:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x87) [ 541.073708][ T3088] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 541.333555][ T3088] usb 5-1: Using ep0 maxpacket: 16 [ 541.454379][ T3088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 541.465282][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.477292][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.487933][ T3088] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 541.501953][ T3088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 541.509219][ T3088] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 541.518728][ T3088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.528641][ T3088] usb 5-1: config 0 descriptor?? [ 541.873602][ T3088] usbhid 5-1:0.0: can't add hid device: -71 [ 541.879766][ T3088] usbhid: probe of 5-1:0.0 failed with error -71 [ 541.887950][ T3088] usb 5-1: USB disconnect, device number 43 21:47:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:20 executing program 1: 21:47:20 executing program 5: 21:47:20 executing program 2: 21:47:20 executing program 0: 21:47:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x88) 21:47:20 executing program 2: 21:47:20 executing program 5: 21:47:20 executing program 0: 21:47:20 executing program 1: 21:47:20 executing program 2: 21:47:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x89) [ 542.733467][ T3088] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 542.983404][ T3088] usb 5-1: Using ep0 maxpacket: 16 [ 543.106088][ T3088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 543.116948][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.128178][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.138243][ T3088] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 543.151548][ T3088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.158483][ T3088] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 543.167833][ T3088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.179376][ T3088] usb 5-1: config 0 descriptor?? [ 543.523387][ T3088] usbhid 5-1:0.0: can't add hid device: -71 [ 543.529408][ T3088] usbhid: probe of 5-1:0.0 failed with error -71 [ 543.539931][ T3088] usb 5-1: USB disconnect, device number 44 21:47:21 executing program 0: 21:47:21 executing program 5: 21:47:21 executing program 2: 21:47:21 executing program 1: 21:47:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8a) 21:47:21 executing program 1: 21:47:21 executing program 0: 21:47:21 executing program 2: 21:47:21 executing program 5: 21:47:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8b) 21:47:21 executing program 0: 21:47:21 executing program 5: 21:47:21 executing program 1: 21:47:21 executing program 2: 21:47:22 executing program 0: [ 544.343276][ T3088] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 544.583239][ T3088] usb 5-1: Using ep0 maxpacket: 16 [ 544.703267][ T3088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 544.714082][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.726580][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.737071][ T3088] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 544.750514][ T3088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 544.757217][ T3088] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 544.766467][ T3088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.775657][ T3088] usb 5-1: config 0 descriptor?? [ 545.113163][ T3088] usbhid 5-1:0.0: can't add hid device: -71 [ 545.119218][ T3088] usbhid: probe of 5-1:0.0 failed with error -71 [ 545.130168][ T3088] usb 5-1: USB disconnect, device number 45 21:47:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffd, 0x2000000040007) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:23 executing program 1: 21:47:23 executing program 5: 21:47:23 executing program 2: 21:47:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8c) 21:47:23 executing program 0: 21:47:23 executing program 0: 21:47:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x42) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 21:47:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000000)='./file1/file0/../file0/file0\x00', 0x0, &(0x7f0000000240)="2d3032d3e9d3404172d0933adbd1bc5e8bdd5763fdbbc4aa7156830791461f8b") 21:47:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x2500}}], 0x4000000000000d0, 0x0) 21:47:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8d) 21:47:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000100000000000000000002ffff01"], 0x48}], 0x1}, 0x0) [ 545.943244][ T3088] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 546.213026][ T3088] usb 5-1: Using ep0 maxpacket: 16 [ 546.356213][ T3088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 546.367102][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.378386][ T3088] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.388224][ T3088] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 546.401169][ T3088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.407867][ T3088] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 546.417006][ T3088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.430014][ T3088] usb 5-1: config 0 descriptor?? [ 546.773007][ T3088] usbhid 5-1:0.0: can't add hid device: -71 [ 546.779010][ T3088] usbhid: probe of 5-1:0.0 failed with error -71 [ 546.787689][ T3088] usb 5-1: USB disconnect, device number 46 21:47:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) 21:47:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000001090000007f0008000000b4f1a0930136388520a54a95a0a13f4ada47f103d4a9e0a1e40300bb7c0d1832120bb29f66c45420de69658b4a042d06"]) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r2) 21:47:25 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) socket(0x2c, 0x6, 0xf13a) io_setup(0x100000000000c333, &(0x7f0000000180)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') write$P9_RFSYNC(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x5, r3, 0x0) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0x0) 21:47:25 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, 0x0) 21:47:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8e) [ 547.220066][T20542] PKCS7: Unknown OID: [5] 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 [ 547.236194][T20542] PKCS7: Only support pkcs7_signedData type 21:47:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000dc01200000000000000000000006ba00"}) r1 = syz_open_pts(r0, 0x801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x20d) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000980)=0x11) dup3(r1, r0, 0x0) 21:47:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000dc01200000000000000000000006ba00"}) r1 = syz_open_pts(r0, 0x801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) r2 = open(0x0, 0x1013c1, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, 0x0, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f00000016c0)=""/4096, &(0x7f00000001c0)=0x1000) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 21:47:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8f) 21:47:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x90) 21:47:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x4000000000000d0, 0x0) 21:47:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000dc01200000000000000000000006ba00"}) r1 = syz_open_pts(r0, 0x801) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000980)=0x11) dup3(0xffffffffffffffff, r0, 0x0) [ 547.623426][ T8173] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 547.872820][ T8173] usb 5-1: Using ep0 maxpacket: 16 [ 547.992834][ T8173] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 548.004505][ T8173] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.015508][ T8173] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.025518][ T8173] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 548.038446][ T8173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 548.045162][ T8173] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 548.054230][ T8173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.063370][ T8173] usb 5-1: config 0 descriptor?? [ 548.423145][ T8173] usbhid 5-1:0.0: can't add hid device: -71 [ 548.429313][ T8173] usbhid: probe of 5-1:0.0 failed with error -71 [ 548.437688][ T8173] usb 5-1: USB disconnect, device number 47 21:47:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:47:26 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0505405, &(0x7f0000000100)) 21:47:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x91) 21:47:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 21:47:26 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000006c"], &(0x7f0000000140)=""/149, 0x52, 0x95, 0x8}, 0x20) 21:47:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) 21:47:26 executing program 1: r0 = getpid() pidfd_open(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') unshare(0x2a000400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 21:47:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x8, 0x6, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 21:47:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x92) 21:47:26 executing program 5: r0 = open(&(0x7f0000000240)='./file0\x00', 0x102e0, 0x0) fcntl$setsig(r0, 0xa, 0x11) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) fcntl$setlease(r0, 0x400, 0x0) dup(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) eventfd(0x0) 21:47:26 executing program 2: r0 = open(&(0x7f0000000240)='./file0\x00', 0x102e0, 0x0) fcntl$setsig(r0, 0xa, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) fcntl$setlease(r0, 0x400, 0x0) dup(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) eventfd(0x0) [ 549.252670][ T8173] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 549.502895][ T8173] usb 5-1: Using ep0 maxpacket: 16 [ 549.642765][ T8173] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 549.653555][ T8173] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.664564][ T8173] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.674377][ T8173] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 549.687436][ T8173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 549.694859][ T8173] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 549.704924][ T8173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.716617][ T8173] usb 5-1: config 0 descriptor?? [ 550.042635][ T8173] usbhid 5-1:0.0: can't add hid device: -71 [ 550.048672][ T8173] usbhid: probe of 5-1:0.0 failed with error -71 [ 550.057676][ T8173] usb 5-1: USB disconnect, device number 48 21:47:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x93) 21:47:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) 21:47:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x1}) 21:47:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "d3b2ccc2d70ccf2acede253b8ca65b33", '\x00', "9676e64fbcbdb666"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:28 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 21:47:28 executing program 0: close(0xffffffffffffffff) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x5cefff7f, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x4000, 0x1) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 550.543076][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 550.576749][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:47:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x94) 21:47:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x3001}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x9}) 21:47:28 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100a00, r4}) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100a00, r2}) 21:47:28 executing program 1: mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000001090000007f0008000000b4f1a0930136388520a54a95a0a13f4ada47f103d4a9e0a1e40300bb7c0d1832120bb29f66c45420de69658b4a042d06"]) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r0) 21:47:28 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0xfffffffa, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x2a00}], 0x4000000000000d0, 0x0) 21:47:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x95) [ 550.783612][T20696] PKCS7: Unknown OID: [5] (bad) [ 550.811979][T20696] PKCS7: Only support pkcs7_signedData type [ 550.822821][T16243] usb 5-1: new high-speed USB device number 49 using dummy_hcd 21:47:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b070700000058"], 0x78) 21:47:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000507000000000000000072030000", @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:47:28 executing program 5: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x5cefff7f, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 550.912473][T20707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 550.921820][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.981144][T20707] device bond4 entered promiscuous mode [ 551.031634][T20750] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 551.055043][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 551.072709][T16243] usb 5-1: Using ep0 maxpacket: 16 [ 551.192690][T16243] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 551.211046][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.242441][T16243] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.252164][T16243] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 551.277184][T16243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 551.284877][T16243] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 551.306491][T16243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.325926][T16243] usb 5-1: config 0 descriptor?? [ 551.672478][T16243] usbhid 5-1:0.0: can't add hid device: -71 [ 551.678527][T16243] usbhid: probe of 5-1:0.0 failed with error -71 [ 551.689481][T16243] usb 5-1: USB disconnect, device number 49 21:47:29 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 21:47:29 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 21:47:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x96) 21:47:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) 21:47:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/114, 0x7}) 21:47:29 executing program 1: 21:47:29 executing program 5: 21:47:30 executing program 1: 21:47:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x12c) 21:47:30 executing program 0: 21:47:30 executing program 2: 21:47:30 executing program 5: [ 552.492407][ T12] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 552.732531][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 552.862472][ T12] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 73, using maximum allowed: 30 [ 552.876527][ T12] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.887474][ T12] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.897332][ T12] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 552.910285][ T12] usb 5-1: config 0 interface 0 has no altsetting 0 [ 552.916958][ T12] usb 5-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 552.926048][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.939630][ T12] usb 5-1: config 0 descriptor?? [ 553.282259][ T12] usbhid 5-1:0.0: can't add hid device: -71 [ 553.288347][ T12] usbhid: probe of 5-1:0.0 failed with error -71 [ 553.296512][ T12] usb 5-1: USB disconnect, device number 50 21:47:31 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 21:47:31 executing program 1: 21:47:31 executing program 0: 21:47:31 executing program 2: 21:47:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x1c2) 21:47:31 executing program 5: 21:47:31 executing program 0: 21:47:31 executing program 1: 21:47:31 executing program 2: 21:47:31 executing program 1: 21:47:31 executing program 5: 21:47:31 executing program 2: 21:47:32 executing program 0: 21:47:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x258) 21:47:32 executing program 1: 21:47:32 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 21:47:32 executing program 5: 21:47:32 executing program 2: 21:47:32 executing program 1: 21:47:32 executing program 5: 21:47:32 executing program 2: 21:47:32 executing program 0: 21:47:32 executing program 1: 21:47:32 executing program 5: 21:47:32 executing program 1: 21:47:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x2ee) 21:47:32 executing program 0: 21:47:32 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 21:47:32 executing program 5: 21:47:32 executing program 2: 21:47:32 executing program 1: 21:47:32 executing program 0: 21:47:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 21:47:32 executing program 5: 21:47:32 executing program 0: 21:47:32 executing program 2: 21:47:32 executing program 1: 21:47:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000080)) 21:47:32 executing program 5: syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) [ 555.515846][ C1] BUG: stack guard page was hit at 00000000d8d8ea7d (stack is 000000002b643940..000000000ef7143c) [ 555.515854][ C1] kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN [ 555.515860][ C1] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.8.0-syzkaller #0 [ 555.515867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.515872][ C1] Workqueue: bat_events batadv_nc_worker [ 555.515878][ C1] RIP: 0010:no_context+0x33/0x9f0 [ 555.515893][ C1] Code: fc ff df 41 56 41 89 ce 41 55 49 89 f5 41 54 49 89 d4 55 48 89 fd 53 48 8d 9d 88 00 00 00 48 81 ec d0 00 00 00 48 8d 44 24 30 <44> 89 44 24 10 48 c7 44 24 30 b3 8a b5 41 48 c1 e8 03 48 89 04 24 [ 555.515897][ C1] RSP: 0018:ffffc90000dcff60 EFLAGS: 00010086 [ 555.515906][ C1] RAX: ffffc90000dcff90 RBX: ffffc90000dd01f0 RCX: 000000000000000b [ 555.515912][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffc90000dd0168 [ 555.515918][ C1] RBP: ffffc90000dd0168 R08: 0000000000000001 R09: 0000000000000000 [ 555.515924][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 555.515930][ C1] R13: 0000000000000002 R14: 000000000000000b R15: dffffc0000000000 [ 555.515936][ C1] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 555.515941][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.515948][ C1] CR2: ffffc90000dcff58 CR3: 0000000090961000 CR4: 00000000001526e0 [ 555.515954][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.515960][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.515962][ C1] Call Trace: [ 555.515967][ C1] __bad_area_nosemaphore+0xa9/0x480 [ 555.515971][ C1] do_user_addr_fault+0x760/0xbf0 [ 555.515975][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.515979][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.515983][ C1] exc_page_fault+0xa8/0x160 [ 555.515986][ C1] asm_exc_page_fault+0x1e/0x30 [ 555.515992][ C1] RIP: 0010:preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516006][ C1] Code: 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 00 <00> 00 00 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 [ 555.516010][ C1] RSP: 0018:ffffc90000dd0210 EFLAGS: 00010046 [ 555.516018][ C1] RAX: 0000000000000000 RBX: ffffc90000dd0510 RCX: 0000000000000000 [ 555.516024][ C1] RDX: 0000000000000001 RSI: ffffffff839968eb RDI: 0000000000000001 [ 555.516030][ C1] RBP: ffffffff810076c5 R08: ffffffff83b0d870 R09: 0000000000000000 [ 555.516036][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 555.516042][ C1] R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 [ 555.516047][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516050][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516054][ C1] ? bsearch+0x9b/0xb0 [ 555.516058][ C1] ? search_module_extables+0xce/0x100 [ 555.516063][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516067][ C1] ? search_exception_tables+0x42/0x50 [ 555.516071][ C1] ? fixup_exception+0x4b/0xca [ 555.516074][ C1] ? no_context+0xe7/0x9f0 [ 555.516078][ C1] ? pgtable_bad+0x90/0x90 [ 555.516082][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516086][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516090][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516100][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516103][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516106][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516109][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516111][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516113][ C1] ? bsearch+0x9b/0xb0 [ 555.516116][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516119][ C1] ? search_module_extables+0xce/0x100 [ 555.516123][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516127][ C1] ? search_exception_tables+0x42/0x50 [ 555.516129][ C1] ? fixup_exception+0x4b/0xca [ 555.516132][ C1] ? no_context+0xe7/0x9f0 [ 555.516135][ C1] ? pgtable_bad+0x90/0x90 [ 555.516139][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516142][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516146][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516149][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516152][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516156][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516160][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516163][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516166][ C1] ? bsearch+0x9b/0xb0 [ 555.516170][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516174][ C1] ? search_module_extables+0xce/0x100 [ 555.516178][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516181][ C1] ? search_exception_tables+0x42/0x50 [ 555.516184][ C1] ? fixup_exception+0x4b/0xca [ 555.516188][ C1] ? no_context+0xe7/0x9f0 [ 555.516191][ C1] ? pgtable_bad+0x90/0x90 [ 555.516194][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516198][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516201][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516205][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516208][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516211][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516215][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516219][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516221][ C1] ? bsearch+0x9b/0xb0 [ 555.516225][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516229][ C1] ? search_module_extables+0xce/0x100 [ 555.516233][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516236][ C1] ? search_exception_tables+0x42/0x50 [ 555.516240][ C1] ? fixup_exception+0x4b/0xca [ 555.516242][ C1] ? no_context+0xe7/0x9f0 [ 555.516246][ C1] ? pgtable_bad+0x90/0x90 [ 555.516249][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516253][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516256][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516260][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516263][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516266][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516270][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516273][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516275][ C1] ? bsearch+0x9b/0xb0 [ 555.516279][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516283][ C1] ? search_module_extables+0xce/0x100 [ 555.516287][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516291][ C1] ? search_exception_tables+0x42/0x50 [ 555.516294][ C1] ? fixup_exception+0x4b/0xca [ 555.516297][ C1] ? no_context+0xe7/0x9f0 [ 555.516300][ C1] ? pgtable_bad+0x90/0x90 [ 555.516304][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516307][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516311][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516314][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516318][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516327][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516331][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516334][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516337][ C1] ? bsearch+0x9b/0xb0 [ 555.516341][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516345][ C1] ? search_module_extables+0xce/0x100 [ 555.516349][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516353][ C1] ? search_exception_tables+0x42/0x50 [ 555.516356][ C1] ? fixup_exception+0x4b/0xca [ 555.516359][ C1] ? no_context+0xe7/0x9f0 [ 555.516362][ C1] ? pgtable_bad+0x90/0x90 [ 555.516366][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516369][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516373][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516376][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516379][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516383][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516387][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516390][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516393][ C1] ? bsearch+0x9b/0xb0 [ 555.516397][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516401][ C1] ? search_module_extables+0xce/0x100 [ 555.516405][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516409][ C1] ? search_exception_tables+0x42/0x50 [ 555.516412][ C1] ? fixup_exception+0x4b/0xca [ 555.516415][ C1] ? no_context+0xe7/0x9f0 [ 555.516418][ C1] ? pgtable_bad+0x90/0x90 [ 555.516422][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516426][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516429][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516432][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516436][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516439][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516443][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516446][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516449][ C1] ? bsearch+0x9b/0xb0 [ 555.516453][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516457][ C1] ? search_module_extables+0xce/0x100 [ 555.516461][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516465][ C1] ? search_exception_tables+0x42/0x50 [ 555.516469][ C1] ? fixup_exception+0x4b/0xca [ 555.516472][ C1] ? no_context+0xe7/0x9f0 [ 555.516475][ C1] ? pgtable_bad+0x90/0x90 [ 555.516478][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516482][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516485][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516489][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516492][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516496][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516500][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516503][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516506][ C1] ? bsearch+0x9b/0xb0 [ 555.516510][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516514][ C1] ? search_module_extables+0xce/0x100 [ 555.516518][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516522][ C1] ? search_exception_tables+0x42/0x50 [ 555.516525][ C1] ? fixup_exception+0x4b/0xca [ 555.516528][ C1] ? no_context+0xe7/0x9f0 [ 555.516531][ C1] ? pgtable_bad+0x90/0x90 [ 555.516535][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516538][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516542][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516545][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516549][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516552][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516556][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516559][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516563][ C1] ? bsearch+0x9b/0xb0 [ 555.516567][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516571][ C1] ? search_module_extables+0xce/0x100 [ 555.516575][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516578][ C1] ? search_exception_tables+0x42/0x50 [ 555.516582][ C1] ? fixup_exception+0x4b/0xca [ 555.516585][ C1] ? no_context+0xe7/0x9f0 [ 555.516588][ C1] ? pgtable_bad+0x90/0x90 [ 555.516592][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516595][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516599][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516602][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516605][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516609][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516613][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516616][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516619][ C1] ? bsearch+0x9b/0xb0 [ 555.516623][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516627][ C1] ? search_module_extables+0xce/0x100 [ 555.516631][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516635][ C1] ? search_exception_tables+0x42/0x50 [ 555.516638][ C1] ? fixup_exception+0x4b/0xca [ 555.516641][ C1] ? no_context+0xe7/0x9f0 [ 555.516644][ C1] ? pgtable_bad+0x90/0x90 [ 555.516648][ C1] ? __bad_area_nosemaphore+0xa9/0x480 [ 555.516651][ C1] ? do_user_addr_fault+0x760/0xbf0 [ 555.516655][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 555.516658][ C1] ? trace_hardirqs_off+0x27/0x210 [ 555.516661][ C1] ? exc_page_fault+0xa8/0x160 [ 555.516665][ C1] ? asm_exc_page_fault+0x1e/0x30 [ 555.516669][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516672][ C1] ? cmp_ex_sort+0xc0/0xc0 [ 555.516675][ C1] ? bsearch+0x9b/0xb0 [ 555.516679][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516683][ C1] ? search_module_extables+0xce/0x100 [ 555.516687][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 555.516690][ C1] ? search_exception_tables+0x42/0x5 [ 555.516696][ C1] Lost 491 message(s)! [ 555.516790][ C1] ---[ end trace 6a8f529b724be213 ]--- [ 555.516794][ C1] RIP: 0010:no_context+0x33/0x9f0 [ 555.516806][ C1] Code: fc ff df 41 56 41 89 ce 41 55 49 89 f5 41 54 49 89 d4 55 48 89 fd 53 48 8d 9d 88 00 00 00 48 81 ec d0 00 00 00 48 8d 44 24 30 <44> 89 44 24 10 48 c7 44 24 30 b3 8a b5 41 48 c1 e8 03 48 89 04 24 [ 555.516810][ C1] RSP: 0018:ffffc90000dcff60 EFLAGS: 00010086 [ 555.516817][ C1] RAX: ffffc90000dcff90 RBX: ffffc90000dd01f0 RCX: 000000000000000b [ 555.516822][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffc90000dd0168 [ 555.516827][ C1] RBP: ffffc90000dd0168 R08: 0000000000000001 R09: 0000000000000000 [ 555.516832][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 555.516837][ C1] R13: 0000000000000002 R14: 000000000000000b R15: dffffc0000000000 [ 555.516843][ C1] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 555.516847][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.516853][ C1] CR2: ffffc90000dcff58 CR3: 0000000090961000 CR4: 00000000001526e0 [ 555.516858][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.516863][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.516869][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 555.527924][ C1] Kernel Offset: disabled