00000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000400000000001804000000000000000000000c000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000686e138c6c0ff77500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6599200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053cbf7eee533b170000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee7200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800"/2376]}, 0x9c0) 19:49:29 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x40046103, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@remote, 0x69}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x10, 0xb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x6}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0) [ 1377.554105][ T4971] ebt_among: src integrity fail: 100 [ 1377.603356][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 1377.661649][ T4976] QAT: failed to copy from user. [ 1377.678847][ T4976] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1377.687551][ T4976] sch_fq: defrate 0 ignored. [ 1377.735686][ T28] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1377.744272][ T28] usb 2-1: config 0 has no interface number 0 [ 1377.750490][ T28] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 1377.759817][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.773019][ T28] usb 2-1: config 0 descriptor?? [ 1379.353523][ T28] smscufx: Failed to write register index 0x00007010 with value 0x00000000 [ 1379.362231][ T28] smscufx: error writing 0x7010 [ 1379.362251][ T28] smscufx: error -71 configuring system clock [ 1379.368337][ T28] smscufx: probe of 2-1:0.122 failed with error -71 [ 1379.386533][ T28] usb 2-1: USB disconnect, device number 75 19:49:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x3, &(0x7f0000000000), 0x20a154cc) pipe(0x0) 19:49:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r1 = socket(0x10, 0x3, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a000000000000002000000000"], 0x18}}, 0x0) 19:49:31 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x0, "70f3d0f554c3e3aa88d031bb057b60075d49df64f2b8ed24eb386634d481ae36eb76dfd2ae8d8a83ed4986c1958d6e046c005a9fa4b0d97d3e61090a042baf51f8499ad75e0cfb2b02922406e6b0580e"}, 0xd8) sendmsg$inet(r0, &(0x7f0000001a80)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x20004801) 19:49:31 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x40046103, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@remote, 0x69}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x10, 0xb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x6}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0) 19:49:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000001c000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x80000000004, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1379.935812][ T4996] QAT: failed to copy from user. [ 1379.963382][ T4996] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1379.971607][ T4996] sch_fq: defrate 0 ignored. 19:49:32 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r1, r0, 0x0, 0x1f7) 19:49:32 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000504ed0080648c6394f20531d200060010800000009700d0bd00000200"/46, 0x2e}], 0x1}, 0x0) 19:49:32 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x40046103, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@remote, 0x69}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x10, 0xb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x6}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0) 19:49:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 19:49:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00'}) 19:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x7b01bcef) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x4cb]}) lstat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffe9c, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x100000000000111}}, 0xfffffe71) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1380.322005][ T5015] QAT: failed to copy from user. 19:49:32 executing program 4: socket$alg(0x26, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1380.392266][ T5020] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1380.400686][ T5020] sch_fq: defrate 0 ignored. 19:49:32 executing program 3: unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x4d826e41) 19:49:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 19:49:32 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 19:49:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x800) r1 = fcntl$dupfd(r0, 0x0, r0) read$eventfd(r1, 0x0, 0x16e) 19:49:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000080000020269a5cdc291e96e7167dd549815de91787d15a77da5302fd46b9f55c044ab05dc005efe703f176"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x3f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c8adecdf0066dfe1"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000340)={0x7, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "eea9a76841849d7d"}}, 0x48}}, 0x0) 19:49:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x28}}, 0x0) 19:49:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0xfe00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 19:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 19:49:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x204e23, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 19:49:33 executing program 4: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000100)=@hat={'changehat '}, 0x1d) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x9c) 19:49:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 19:49:33 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\f\xcd\x80\xbf\xcd\xbd\xfb\x8bwa\xc1WvU\xff\xc6\xb5%\xbd\n\x90\x9e\xa8\x94\xefC\x9f\xb1\xf4\x8arA\xa1\x88\xef\"/\xcd@\x19(\xb58\x88\xca\x8de*\xed\x89\x99\xa9*\xc3W&\xa4y]\xb5\x85P\xa7M\xf84\xcc\x91\xe7@\xdf\x8a\xc2*\x18\xd2:}\xae\xf6a\x02\x91\xf2\xc1\xc9\xcb\x90X0\xad\x02\xe9\x9b\xdd\x01\x8f\xfa\x9f\x16\x12pT1A\xcf.\x88\xf8b\x83e\x93K\x8ai\xb0|\xa6\xec\n\xf5\xe1|\xc6\x935\x92q\xaa\xfbv\x11\x02w/\xdb\xbe\xca\x94\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x8000) write(r0, &(0x7f0000000140)="0600", 0x2) sendfile(r0, r0, &(0x7f0000000100), 0x4000010000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000003, 0x11, r0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2000000000000292}, 0x10) 19:49:33 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}, 0x200000}) munmap(&(0x7f000072b000/0x3000)=nil, 0x3000) 19:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 19:49:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mountstats\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}], 0x1, 0x2) 19:49:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 19:49:33 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 19:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 19:49:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x81000000}, @random='5a\a\x00', [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x140, 0x80ffffff, 0x28, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 19:49:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 19:49:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="26e5c55a9b1c", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:49:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000f000094e083cbdcd1c625fb45548acaf33e00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x2, 'red\x00'}, {0x4}}]}, 0x30}}, 0x0) 19:49:34 executing program 4: prctl$PR_SET_SECCOMP(0x34, 0x1, 0x0) [ 1382.183867][ C0] net_ratelimit: 26 callbacks suppressed [ 1382.183889][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.196165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.202794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.209451][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:49:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x801, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61) read(r1, &(0x7f00000000c0)=""/127, 0x7f) close(r1) 19:49:34 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 19:49:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000024008f0b000000000000000000000000480003006c7a73000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00000000bf1ed7b07fe8a37887825e81cb0a76cf733d54c44b8548c2984bfc179b551e15891b860b47aab55e89b066902d5804421c9e84d9c8c7761d6e32f0c5b3e3c6706f3b7ab3ffc9fa8853a32256b8d4f95bb96cd98bccc0e30373d03c3be8a523cabe00554f423d415f68c08ecab2ec6aa9fe10b170653dbfdc82cd906b2d1fc6f72aa28f431734"], 0x5c}}, 0x0) 19:49:34 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r3) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r4, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 19:49:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x0, 0x4, 0x1}) 19:49:34 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000004"}], 0x28}, 0x0) [ 1382.343716][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.350010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.356597][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.362853][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.369441][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.375826][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:49:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) [ 1382.505059][ T5147] IPVS: ftp: loaded support on port[0] = 21 19:49:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000680)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() connect$vsock_stream(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x4001000000000014) 19:49:34 executing program 4: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000000)) 19:49:34 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xda, 0x1f, 0xfc, 0x820, 0x6d6, 0x3d, 0xfa58, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0xe, 0xf2, 0xbb, 0x0, [], [{{0x9, 0x5, 0x8b}}, {{0x9, 0x5, 0x8e}}]}}]}}]}}, 0x0) 19:49:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) [ 1382.875569][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:49:35 executing program 4: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000000)) 19:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) r4 = fcntl$dupfd(r2, 0x0, r0) write$vnet(r4, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) [ 1382.936366][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:49:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) [ 1383.093742][ T2831] usb 3-1: new high-speed USB device number 108 using dummy_hcd 19:49:35 executing program 4: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000000)) [ 1383.206230][ T5195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1383.363385][ T2831] usb 3-1: Using ep0 maxpacket: 32 19:49:35 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r3) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r4, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 19:49:35 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003ef5da08b1134200f5f2000000010902240001000000000904f40002827da90009050100000000000009058c000000000000a84355a5d37435f7841b04479a61849089b0f6281c39340c6de5ff335d49535e6095b276cfb1888d1a1e07b805b5b9d443445dad8d877894336fd2d519d8673fb8235d03fe1fa8b30501601cc2e504a9c0d86986cc23d576ca47603739bb63097b7a2e961c6096f348ab41a1bb"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:49:35 executing program 0: unshare(0x2000400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6f) 19:49:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) 19:49:35 executing program 4: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000000)) [ 1383.495804][ T2831] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1383.504165][ T2831] usb 3-1: config 0 has no interface number 0 [ 1383.510414][ T2831] usb 3-1: New USB device found, idVendor=06d6, idProduct=003d, bcdDevice=fa.58 [ 1383.519960][ T2831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:49:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1383.568649][ T5214] IPVS: ftp: loaded support on port[0] = 21 [ 1383.590638][ T2831] usb 3-1: config 0 descriptor?? [ 1383.615412][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1383.698532][ T2831] zr364xx 3-1:0.67: Zoran 364xx compatible webcam plugged [ 1383.706040][ T2831] zr364xx 3-1:0.67: model 06d6:003d detected [ 1383.712217][ T2831] usb 3-1: 320x240 mode selected [ 1383.717341][ T2831] zr364xx 3-1:0.67: Could not find bulk-in endpoint [ 1383.724323][ T2831] zr364xx: probe of 3-1:0.67 failed with error -12 [ 1383.763579][T19770] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1383.864327][ T2831] usb 3-1: USB disconnect, device number 108 [ 1384.123431][T19770] usb 6-1: Using ep0 maxpacket: 8 [ 1384.243574][T19770] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1384.251920][T19770] usb 6-1: config 0 has no interface number 0 [ 1384.258277][T19770] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f2.f5 [ 1384.269917][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.280218][T19770] usb 6-1: config 0 descriptor?? [ 1384.334925][T19770] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1384.531488][T28657] usb 6-1: USB disconnect, device number 83 [ 1384.543455][ T4667] usb 6-1: Failed to submit usb control message: -71 [ 1384.550271][ T4667] usb 6-1: unable to send the bmi data to the device: -71 [ 1384.557675][ T4667] usb 6-1: unable to get target info from device [ 1384.564211][ T4667] usb 6-1: could not get target info (-71) [ 1384.570127][ T4667] usb 6-1: could not probe fw (-71) [ 1384.623371][ T28] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1384.863762][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 1384.983741][ T28] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1384.991913][ T28] usb 3-1: config 0 has no interface number 0 [ 1384.998568][ T28] usb 3-1: New USB device found, idVendor=06d6, idProduct=003d, bcdDevice=fa.58 [ 1385.007856][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.017837][ T28] usb 3-1: config 0 descriptor?? [ 1385.058023][ T28] zr364xx 3-1:0.67: Zoran 364xx compatible webcam plugged [ 1385.066023][ T28] zr364xx 3-1:0.67: model 06d6:003d detected [ 1385.072201][ T28] usb 3-1: 320x240 mode selected [ 1385.077421][ T28] zr364xx 3-1:0.67: Could not find bulk-in endpoint [ 1385.084481][ T28] zr364xx: probe of 3-1:0.67 failed with error -12 [ 1385.255244][ T2831] usb 3-1: USB disconnect, device number 109 [ 1385.323646][T19770] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1385.583411][T19770] usb 6-1: Using ep0 maxpacket: 8 19:49:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$vsock_dgram(0x28, 0x2, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x100) shutdown(r1, 0x0) [ 1385.713477][T19770] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1385.721782][T19770] usb 6-1: config 0 has no interface number 0 [ 1385.728231][T19770] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f2.f5 [ 1385.737984][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.748634][T19770] usb 6-1: config 0 descriptor?? 19:49:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@deltfilter={0x44c, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x420, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team0\x00'}, @TCA_FW_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8]}}]}}]}, 0x44c}}, 0x0) 19:49:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) unshare(0x400) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 19:49:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) 19:49:37 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r3) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r4, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) [ 1385.835371][T19770] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 19:49:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) unshare(0x400) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) [ 1385.972087][ T5242] IPVS: ftp: loaded support on port[0] = 21 [ 1386.011053][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1386.028141][ T3372] usb 6-1: USB disconnect, device number 84 19:49:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="b5da38719622eff442413831ced5ed20dffd62c0af7e24c8ee350bccfecaedfefeb0f0acbaed34989b1cc10c5287aba046cf579068e1c217dfd9b0dbc22cb760b159875a3230249c14125b0b8fe02a1dff7524ef1ed309b489c71c54039e012e10dd032e6ef2655769afc535a6904ca3ceac1ed9019bd260b57b8ecae935dcdec4a9189f870d23fe5057b4757f3712a65f7201c73d21965671c4db45677ff881194aa26439ca2ce2afef2f7452a07954111cad9436f2f371977f6633fae2501d8126f66009f3b0d4"}) [ 1386.134422][T23654] usb 6-1: Failed to submit usb control message: -71 [ 1386.141418][T23654] usb 6-1: unable to send the bmi data to the device: -71 [ 1386.149161][T23654] usb 6-1: unable to get target info from device [ 1386.155709][T23654] usb 6-1: could not get target info (-71) [ 1386.161625][T23654] usb 6-1: could not probe fw (-71) [ 1386.278441][ T5260] vim2m vim2m.0: Fourcc format (0x31384142) invalid. 19:49:38 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/11, 0xeb) 19:49:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='f', 0xffffff7d, 0x8000, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 19:49:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) unshare(0x400) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 19:49:38 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "968dc2ce8eb4914b099c46f7313f860900fe5033b2e55b7f98148c99b974ea85"}) 19:49:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff, 0x1}) 19:49:38 executing program 4: keyctl$clear(0x4, 0xfffffffffffffffc) 19:49:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setfsgid(0x0) 19:49:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) unshare(0x400) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 19:49:38 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7a, 0x9d, 0x57, 0x8, 0x1286, 0x2046, 0x1289, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x1, 0xff, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 19:49:38 executing program 2: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) pwrite64(r0, &(0x7f0000000180)="bda69b240903c77fd62f9c1e2f8a13eaabab2d40d15a7244d3701f7cd0a9e3c205109d57c02d1f00835a4f61eb5624de9bcc0748b71c0ae4d7080bcb2cb12b3eed3c4c7c2f5168df140d36c0723a32473456b4a8c21e11789bd1aba14cb63121337d8bb3b11711aaf2ffa98706d03c224dfcf30641aab86f22969f37a570fc28b6", 0x81, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) 19:49:38 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r3) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r4, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 19:49:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x3) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000140)=0x33, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 19:49:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fchown(r2, 0x0, 0xffffffffffffffff) 19:49:39 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x1, 0x1) 19:49:39 executing program 2: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) pwrite64(r0, &(0x7f0000000180)="bda69b240903c77fd62f9c1e2f8a13eaabab2d40d15a7244d3701f7cd0a9e3c205109d57c02d1f00835a4f61eb5624de9bcc0748b71c0ae4d7080bcb2cb12b3eed3c4c7c2f5168df140d36c0723a32473456b4a8c21e11789bd1aba14cb63121337d8bb3b11711aaf2ffa98706d03c224dfcf30641aab86f22969f37a570fc28b6", 0x81, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) [ 1387.178586][ T5301] IPVS: ftp: loaded support on port[0] = 21 [ 1387.200620][ T3372] usb 6-1: new high-speed USB device number 85 using dummy_hcd 19:49:39 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="f7", 0x100000091}], 0x1, 0x0) tee(r1, r0, 0x7fff, 0x0) 19:49:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001000000000000000000070000001400008fcc9b6bb5418832160000000a0000b300"], 0x28}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:49:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000002400070f00"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x7c}}, 0x0) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x42, 0x0) [ 1387.444883][ T3372] usb 6-1: Using ep0 maxpacket: 8 19:49:39 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2b9, 0x0, 0xffffff26}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') preadv(r6, &(0x7f00000017c0), 0x331, 0xe000000) 19:49:39 executing program 2: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) pwrite64(r0, &(0x7f0000000180)="bda69b240903c77fd62f9c1e2f8a13eaabab2d40d15a7244d3701f7cd0a9e3c205109d57c02d1f00835a4f61eb5624de9bcc0748b71c0ae4d7080bcb2cb12b3eed3c4c7c2f5168df140d36c0723a32473456b4a8c21e11789bd1aba14cb63121337d8bb3b11711aaf2ffa98706d03c224dfcf30641aab86f22969f37a570fc28b6", 0x81, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) [ 1387.564171][ T3372] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1387.572570][ T3372] usb 6-1: config 0 has no interface number 0 [ 1387.579018][ T3372] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89 [ 1387.588260][ T3372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.707102][ T3372] usb 6-1: config 0 descriptor?? [ 1387.745441][ T3372] usb 6-1: NFC: intf 00000000d712f8d1 id 00000000d3ee844c [ 1387.954422][ T3372] usb 6-1: USB disconnect, device number 85 [ 1388.424052][ C0] net_ratelimit: 26 callbacks suppressed [ 1388.424076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.436237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.442831][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.449193][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.743521][ T3372] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1388.983484][ T3372] usb 6-1: Using ep0 maxpacket: 8 [ 1389.103554][ T3372] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1389.111941][ T3372] usb 6-1: config 0 has no interface number 0 [ 1389.118373][ T3372] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89 [ 1389.127592][ T3372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.141148][ T3372] usb 6-1: config 0 descriptor?? [ 1389.185204][ T3372] usb 6-1: NFC: intf 00000000e12803da id 00000000d3ee844c [ 1389.389676][ T3372] usb 6-1: USB disconnect, device number 86 19:49:41 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x2, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040), 0x0, 0x0) 19:49:41 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f00000000c0)) [ 1390.505145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1390.511468][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1390.518088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1390.524454][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1391.420759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1391.426791][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:49:43 executing program 2: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) pwrite64(r0, &(0x7f0000000180)="bda69b240903c77fd62f9c1e2f8a13eaabab2d40d15a7244d3701f7cd0a9e3c205109d57c02d1f00835a4f61eb5624de9bcc0748b71c0ae4d7080bcb2cb12b3eed3c4c7c2f5168df140d36c0723a32473456b4a8c21e11789bd1aba14cb63121337d8bb3b11711aaf2ffa98706d03c224dfcf30641aab86f22969f37a570fc28b6", 0x81, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) 19:49:43 executing program 0: mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 19:49:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r0, &(0x7f0000000200)="1c0000001e00a1eb0000f4ff08000000070000000000000001000000", 0x1c) 19:49:43 executing program 1: futex(&(0x7f0000000ffc), 0x85, 0x0, 0x0, &(0x7f0000000ffc), 0x278b7c90) 19:49:43 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2b9, 0x0, 0xffffff26}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') preadv(r6, &(0x7f00000017c0), 0x331, 0xe000000) [ 1391.598164][ T5362] syz-executor.0 (5362): attempted to duplicate a private mapping with mremap. This is not supported. 19:49:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001a009b8a14e5f40700090400ff0000000000000500000000", 0x1c) 19:49:43 executing program 1: unshare(0x600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) 19:49:43 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000840000000200"/24], 0x18}, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000038c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x2}}, 0x4a49, 0x5}, &(0x7f0000003980)=0x90) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x8) r12 = socket$inet(0x2, 0x4000000805, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) r14 = dup3(r12, r13, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r14, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r13, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x66, &(0x7f000059aff8)={r15}, &(0x7f000034f000)=0x8) 19:49:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9a", 0x1}], 0x1}}], 0x29b, 0x0) 19:49:44 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1, {[@ra={0x94, 0x6, 0xf0ffff}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2dfa53", 0x0, "cb7e7d"}}}}}}, 0x0) 19:49:44 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000690b000000dadb97f1050013800100", 0x22) 19:49:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="2400000020002502075f0165ff61fc0280000000001000220ee1000c08000d00feff1700", 0x24) 19:49:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 19:49:44 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cccbd684"}, 0x0, 0x0, @userptr, 0x4}) 19:49:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='net\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 19:49:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0xffffff73}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) [ 1393.137529][ T5401] sctp: [Deprecated]: syz-executor.0 (pid 5401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1393.137529][ T5401] Use struct sctp_sack_info instead [ 1393.364701][ T5404] sctp: [Deprecated]: syz-executor.0 (pid 5404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1393.364701][ T5404] Use struct sctp_sack_info instead [ 1393.463796][ C1] net_ratelimit: 10 callbacks suppressed [ 1393.463819][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.476128][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.482721][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.489178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.495791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.502089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.508744][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.515190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.664504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.670830][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:49:47 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2b9, 0x0, 0xffffff26}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') preadv(r6, &(0x7f00000017c0), 0x331, 0xe000000) 19:49:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 19:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5800fe01b2a4a280930a06000015290dcd30aeda5e3900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de06000000000000007f8d621a4559e65517b3", 0xdf4d}], 0x1}, 0x0) fcntl$getflags(r0, 0x408) socket$inet6(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x0, "e4b80b549026321cd9e8af965a413c51a8f281ab19f01dea1af56603ae52bb5d8981a539b56de71d901630e949f38ae55a7249cd4b42e375bce9beba0778fb94c809ee5f1273a9a82dc736c48bb798a9"}, 0xd8) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r2, 0x1) 19:49:47 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd90, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007f6000fe01b2403b7bbb0a60000004a84302910000003900050035000c00020000000d0005000000f2ffffffc68b800823090000008d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:49:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x12d, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 19:49:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x40044102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) [ 1395.642168][ T5415] IPv6: NLM_F_CREATE should be specified when creating new route 19:49:47 executing program 0: unshare(0x2000400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x2000001, &(0x7f0000000300)='m&\x13\x8e9y.current\x00') r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'trusted.overlay.redirect\x00'}) 19:49:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 19:49:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003000100000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00034d0200006e0311b309b91731fdc380"], 0x0, 0x0, 0x0}, 0x0) 19:49:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4d154fc8"}, 0x0, 0x0, @userptr, 0x4}) [ 1396.613505][T19770] usb 2-1: new high-speed USB device number 76 using dummy_hcd 19:49:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000300000000000000000800170003e80000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1396.853515][T19770] usb 2-1: Using ep0 maxpacket: 8 [ 1396.973702][T19770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.984997][T19770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1396.998066][T19770] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1397.007302][T19770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.099670][T19770] usb 2-1: config 0 descriptor?? [ 1397.803757][T19770] usb 2-1: string descriptor 0 read error: -22 [ 1398.029305][T19770] input: HID 5543:3031 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:3031.0062/input/input198 [ 1398.075696][T19770] input: HID 5543:3031 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:3031.0062/input/input199 [ 1398.154758][T19770] uclogic 0003:5543:3031.0062: input,hidraw0: USB HID v0.00 Keypad [HID 5543:3031] on usb-dummy_hcd.1-1/input0 [ 1398.245079][T19770] usb 2-1: USB disconnect, device number 76 [ 1398.823817][ C0] net_ratelimit: 14 callbacks suppressed [ 1398.823898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.836050][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.842638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.848999][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:49:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="c30f01bfbd9a0f090fae6db0260f205bba6100b80b00ef360f01df66b9b90b00000f32baa100b80038efdad1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a80)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:51 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2b9, 0x0, 0xffffff26}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') preadv(r6, &(0x7f00000017c0), 0x331, 0xe000000) [ 1399.813470][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.819636][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.826048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.832213][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.838631][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.844821][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:49:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x40044102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) [ 1400.057162][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:49:52 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="9a9387b9ed2ec816ef1f27497faa27d3024ca9a94aea96360fb489c09c59fba51db231d5a4403e0ae2d7892225448a6debd96ce86e9c10b1c3a9780df78b9032f5c591414dd59e5bfbea7aa6246e3e1352e9239b8d9c3624be0f5a6df0a3de368d6e81abaee7d637f9c5319bbb3e5a220b29334245c69cfc525f74479b899ba174b78223cab24dd409e16dac6c2e58946af13ac21c19b0b776435c5ff871d8a4178df66ef00d8e476c600fe54641456fb888b5d5e1f958fd76ab76d11cc4322af8", 0xc1}], 0x17f, 0x0) 19:49:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 19:49:52 executing program 2: r0 = socket(0x8000000000010, 0x10000000002, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x5, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3e0, 0xf0, 0xf0, 0xf0, 0xf0, 0xf0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'ipddp0\x00', 'veth1_to_bond\x00'}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@remote, @loopback, [], [], 'bpq0\x00', 'nlmon0\x00'}, 0x0, 0xc8, 0x128}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr="66c467bd4bfcb27d751dfb09119be3e4"}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'ifb0\x00'}, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xfd7b, 0x4) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/216}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/229}], 0x0, &(0x7f00000008c0)=""/26}}], 0x1e0, 0x0, 0x0) 19:49:52 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3310, 0x0) 19:49:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2a) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r5, 0x0, 0x19402, 0x0) 19:49:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8d, 0x0, [], 0xff}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:52 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x13a7}], 0x2, 0x0, 0xfffffffffffffe8a}, 0x0) 19:49:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x40044102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) 19:49:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 19:49:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) [ 1404.319618][ C1] net_ratelimit: 10 callbacks suppressed [ 1404.319641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.331656][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.338021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.344212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.350464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.356664][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.362905][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:49:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_mreqsrc(r0, 0x10d, 0x11, &(0x7f0000013ff4)={@remote, @loopback}, 0xc) 19:49:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) 19:49:56 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000480)=""/215, 0x2a) clone(0x0, 0x0, 0x0, 0x0, 0x0) 19:49:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)={0xd83, 0x0, "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"}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1404.369125][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:49:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x40044102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) 19:49:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x2d, 0x0, 0x4000000000401}, {}]}, 0x10) 19:49:56 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) unshare(0x2000400) fallocate(r0, 0x0, 0x0, 0x800000000000000) 19:49:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) 19:49:57 executing program 1: r0 = gettid() setpgid(r0, 0xffffffffffffffff) 19:49:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x10000089b1, &(0x7f0000000040)="11dce70176c0fa166ee970fead3a") 19:49:57 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000480)=""/215, 0x2a) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1405.063781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1405.070249][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:49:57 executing program 5: unshare(0x20600) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 19:49:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) 19:49:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)={0x0, 0x1, [{}]}) 19:49:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x71dff6) 19:49:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc04c6100, 0x0) 19:49:57 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x20400) ioctl$KDGETMODE(r0, 0x4004510d, 0x0) 19:49:57 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x200400, 0x0) syncfs(r0) 19:49:57 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000480)=""/215, 0x2a) clone(0x0, 0x0, 0x0, 0x0, 0x0) 19:49:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[0xfc], [], @multicast2}}]}}}]}, 0x4c}}, 0x0) 19:49:57 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @initdev}}]}, 0x110) 19:49:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xe}) 19:49:57 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000)=0x1, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r1, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x1, 0x2, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "d044937df9141cd4"}}, 0x200005c8}}, 0x0) 19:49:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) 19:49:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0xa, @remote}]}}}]}, 0x4c}}, 0x0) 19:49:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigaction(0x1c, &(0x7f0000000000)={0x0, {}, 0x0, 0x0}, &(0x7f0000000340)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000001680)) 19:49:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[0xfc], [], @multicast2}}]}}}]}, 0x4c}}, 0x0) [ 1406.168755][ T5601] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 1406.177325][ T5601] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 19:49:58 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000480)=""/215, 0x2a) clone(0x0, 0x0, 0x0, 0x0, 0x0) 19:49:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000400)=0x400000000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="05040000bafd3e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8117c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:49:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 19:49:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[0xfc], [], @multicast2}}]}}}]}, 0x4c}}, 0x0) 19:49:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:58 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x321d80, 0x0) unshare(0x2000400) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x18) 19:49:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) 19:49:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[0xfc], [], @multicast2}}]}}}]}, 0x4c}}, 0x0) 19:49:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) 19:49:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000400)=0x400000000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="05040000bafd3e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8117c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:49:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1406.864196][ T5632] picdev_read: 6 callbacks suppressed [ 1406.864210][ T5632] kvm: pic: non byte read [ 1406.901104][ T5632] kvm: pic: non byte read [ 1406.937121][ T5632] pic_ioport_write: 6 callbacks suppressed [ 1406.937134][ T5632] kvm: pic: single mode not supported 19:49:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r1, &(0x7f0000010080)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000008a40)="9a", 0x1}], 0x1}}], 0x1, 0x600d054) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:49:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) 19:49:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) [ 1406.938050][ T5632] kvm: pic: single mode not supported [ 1407.039164][ T5632] kvm: pic: non byte read 19:49:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1407.121017][ T5632] kvm: pic: non byte read 19:49:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000400)=0x400000000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="05040000bafd3e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8117c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 1407.154459][ T5632] kvm: pic: non byte read [ 1407.192978][ T5632] kvm: pic: non byte read [ 1407.244745][ T5632] kvm: pic: non byte read [ 1407.274606][ T5632] kvm: pic: non byte read [ 1407.287176][ T5632] kvm: pic: non byte read [ 1407.294391][ T5632] kvm: pic: single mode not supported [ 1407.294417][ T5632] pic_ioport_write: 5 callbacks suppressed [ 1407.294430][ T5632] kvm: pic: level sensitive irq not supported [ 1407.295000][ T5632] kvm: pic: single mode not supported [ 1407.333769][ T5632] kvm: pic: single mode not supported [ 1407.349078][ T5632] kvm: pic: non byte read [ 1407.385788][ T5632] kvm: pic: level sensitive irq not supported [ 1407.386588][ T5632] kvm: pic: single mode not supported [ 1407.421708][ T5632] kvm: pic: level sensitive irq not supported [ 1407.461245][ T5632] kvm: pic: level sensitive irq not supported [ 1407.496763][ T5632] kvm: pic: single mode not supported [ 1407.503047][ T5632] kvm: pic: level sensitive irq not supported [ 1407.528067][ T5632] kvm: pic: level sensitive irq not supported [ 1407.538002][ T5632] kvm: pic: level sensitive irq not supported [ 1407.546661][ T5632] kvm: pic: level sensitive irq not supported [ 1407.556401][ T5632] kvm: pic: single mode not supported [ 1407.562620][ T5632] kvm: pic: level sensitive irq not supported [ 1407.587767][ T5632] kvm: pic: single mode not supported [ 1407.593996][ T5632] kvm: pic: level sensitive irq not supported 19:50:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:50:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) 19:50:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000400)=0x400000000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="05040000bafd3e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8117c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:50:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) 19:50:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}]]]}}}]}, 0x3c}}, 0x0) [ 1407.717264][ T5632] kvm: pic: single mode not supported [ 1409.027358][ T5678] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 19:50:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:50:01 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) 19:50:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000003c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x9d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9f) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) connect$inet6(r4, 0x0, 0x87) getsockname(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) shutdown(r1, 0x1) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") readv(r7, &(0x7f0000000040)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000200)=""/172, 0xac}], 0x2) sendto$inet6(r6, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) 19:50:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 1409.491113][ C1] net_ratelimit: 26 callbacks suppressed [ 1409.491145][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:50:01 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x7c, 0x73, 0x60, 0x8, 0x110a, 0x1613, 0xbe43, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb9, 0x8e, 0x9a}}]}}]}}, 0x0) [ 1409.953504][T28657] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1410.194587][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 1410.314175][T28657] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=be.43 [ 1410.323472][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.335088][T28657] usb 5-1: config 0 descriptor?? [ 1410.503941][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.510355][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.583809][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.590133][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.596765][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.603050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.609687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.616076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.624101][T28657] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1410.647859][T28657] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1410.657747][T28657] mxuport: probe of 5-1:0.0 failed with error -71 [ 1410.697343][T28657] usb 5-1: USB disconnect, device number 16 19:50:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:03 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="fc446145f2b0d76fdd93cce75b8eb034", 0x7}, 0x99, 0x0}}], 0x1, 0x0) 19:50:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 19:50:03 executing program 5: r0 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0) [ 1411.303688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1411.362794][T28657] usb 5-1: new high-speed USB device number 17 using dummy_hcd 19:50:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 19:50:03 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="fc446145f2b0d76fdd93cce75b8eb034", 0x7}, 0x99, 0x0}}], 0x1, 0x0) 19:50:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x4, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xd408, [], @p_u8=0x0}}) [ 1411.603577][T28657] usb 5-1: Using ep0 maxpacket: 8 19:50:03 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000100)={0x0, 0x10}) [ 1411.723679][T28657] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=be.43 [ 1411.732974][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:50:03 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="fc446145f2b0d76fdd93cce75b8eb034", 0x7}, 0x99, 0x0}}], 0x1, 0x0) [ 1411.795022][T28657] usb 5-1: config 0 descriptor?? 19:50:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 1411.949322][ T5736] picdev_read: 48 callbacks suppressed [ 1411.949333][ T5736] kvm: pic: non byte read [ 1411.968675][ T5736] kvm: pic: non byte read [ 1411.998303][ T5736] pic_ioport_write: 40 callbacks suppressed [ 1411.998317][ T5736] kvm: pic: single mode not supported [ 1412.074089][T28657] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1412.132693][T28657] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1412.141971][T28657] mxuport: probe of 5-1:0.0 failed with error -71 [ 1412.221128][T28657] usb 5-1: USB disconnect, device number 17 [ 1412.350619][ T5725] kvm: pic: single mode not supported [ 1412.351035][ T5725] kvm: pic: single mode not supported [ 1412.452599][ T5736] kvm: pic: single mode not supported 19:50:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 19:50:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:05 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="fc446145f2b0d76fdd93cce75b8eb034", 0x7}, 0x99, 0x0}}], 0x1, 0x0) 19:50:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 19:50:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000000), 0x4) 19:50:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x40000023]}) 19:50:05 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) read(r0, &(0x7f0000000480)=""/98, 0x62) 19:50:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r1, &(0x7f00000002c0), 0x1a5) 19:50:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000000)=0x8) [ 1412.453582][ T5736] kvm: pic: single mode not supported [ 1413.800376][ T5771] kvm: pic: non byte read [ 1413.862404][ T5786] kvm: pic: non byte read 19:50:05 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x44, 0x20000000000a, 0x0, "8cac3a94aa7dfd73c37b6187fc5a11e774c84a936b60a327949ce1273b94266c"}) [ 1413.890714][ T5771] kvm: pic: non byte read [ 1413.899009][ T5786] kvm: pic: non byte read 19:50:06 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1413.917456][ T5771] kvm: pic: single mode not supported [ 1413.935842][ T5771] kvm: pic: single mode not supported [ 1413.945169][ T5786] kvm: pic: single mode not supported [ 1413.967231][ T5771] kvm: pic: non byte read [ 1413.994853][ T5771] kvm: pic: non byte read 19:50:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:'}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x4, 0x10, 0xffffffffffffffff, 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 1414.014610][ T5786] kvm: pic: single mode not supported [ 1414.027417][ T5786] kvm: pic: non byte read [ 1414.042292][ T5771] kvm: pic: non byte read [ 1414.087651][ T5771] kvm: pic: single mode not supported [ 1414.087679][ T5771] pic_ioport_write: 40 callbacks suppressed [ 1414.087692][ T5771] kvm: pic: level sensitive irq not supported [ 1414.149816][ T5771] kvm: pic: level sensitive irq not supported [ 1414.184504][ T5771] kvm: pic: level sensitive irq not supported [ 1414.196940][ T5786] kvm: pic: level sensitive irq not supported [ 1414.204099][ T5771] kvm: pic: level sensitive irq not supported [ 1414.219787][ T5786] kvm: pic: level sensitive irq not supported [ 1414.230693][ T5771] kvm: pic: level sensitive irq not supported [ 1414.231271][ T5786] kvm: pic: level sensitive irq not supported [ 1414.247350][ T5786] kvm: pic: level sensitive irq not supported [ 1414.254893][ T5771] kvm: pic: level sensitive irq not supported [ 1414.663864][ C1] net_ratelimit: 15 callbacks suppressed [ 1414.663885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.682225][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.743983][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.750436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.757182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.763615][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.770209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.776696][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.463521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.469637][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:50:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 19:50:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x5b9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x21, &(0x7f0000ad2000), &(0x7f0000000080)=0x144) 19:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xc, 0xfffffffffffffffe, &(0x7f0000000080)=0x1cf) 19:50:08 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000440)=[{0x0, 0x8001}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semctl$IPC_RMID(r0, 0x0, 0x0) 19:50:08 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2f00, 0x0) 19:50:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, 0xffffffffffffffff, &(0x7f0000000280)=0xa8) 19:50:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 19:50:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 19:50:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x31, 0x11d, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 19:50:08 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) unshare(0x20400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 19:50:08 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x0, {0x2, 0x0, @loopback}, 'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x6}) 19:50:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x241}, 0x48) 19:50:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 19:50:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) 19:50:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4, 0xfffffffffffffffe}]}, 0x30}}, 0x0) 19:50:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd5e23dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'md4\x00'}}) [ 1416.705911][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1416.719511][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1416.730228][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1416.741719][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready 19:50:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 19:50:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000083], [0xc1]}) [ 1416.755379][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1416.766531][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1416.778409][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 19:50:08 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xfb, 0xb7, 0xd1, 0x8, 0x19d2, 0x1140, 0x9199, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0xb}}, {{0x9, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x1e}}]}}]}}]}}, 0x0) 19:50:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 19:50:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 19:50:09 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000540)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) 19:50:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4, 0xfffffffffffffffe}]}, 0x30}}, 0x0) [ 1417.258352][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1417.269038][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1417.277287][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1417.285044][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1417.292870][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1417.300803][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready 19:50:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xa840}]}) 19:50:09 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x232, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d216dfc2fc6057c7"}}, 0x48}}, 0x0) close(r0) [ 1417.308818][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1417.317418][T19770] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1417.573421][T19770] usb 6-1: Using ep0 maxpacket: 8 [ 1417.693587][T19770] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1417.701893][T19770] usb 6-1: config 0 has no interface number 0 [ 1417.708276][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1417.718965][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1417.729965][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1417.740733][T19770] usb 6-1: New USB device found, idVendor=19d2, idProduct=1140, bcdDevice=91.99 [ 1417.749976][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.761309][T19770] usb 6-1: config 0 descriptor?? [ 1417.818307][T19770] option 6-1:0.20: GSM modem (1-port) converter detected 19:50:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 19:50:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4, 0xfffffffffffffffe}]}, 0x30}}, 0x0) 19:50:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001200)=ANY=[@ANYBLOB='-3'], 0x2) 19:50:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000140)) 19:50:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newspdinfo={0x5c, 0x24, 0xd2c64fec176d0b8f, 0x0, 0x0, 0x0, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x5c}}, 0x0) [ 1418.018456][T19770] usb 6-1: USB disconnect, device number 87 [ 1418.026180][T19770] option 6-1:0.20: device disconnected [ 1418.070400][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1418.081194][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1418.089240][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1418.097053][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1418.105069][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1418.112959][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1418.121044][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1418.813449][T28657] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1419.053266][T28657] usb 6-1: Using ep0 maxpacket: 8 [ 1419.173482][T28657] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1419.181742][T28657] usb 6-1: config 0 has no interface number 0 [ 1419.188033][T28657] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1419.198733][T28657] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1419.209423][T28657] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1419.220159][T28657] usb 6-1: New USB device found, idVendor=19d2, idProduct=1140, bcdDevice=91.99 [ 1419.229489][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.238857][T28657] usb 6-1: config 0 descriptor?? [ 1419.287539][T28657] option 6-1:0.20: GSM modem (1-port) converter detected [ 1419.485493][T19770] usb 6-1: USB disconnect, device number 88 [ 1419.492282][T19770] option 6-1:0.20: device disconnected 19:50:12 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xfb, 0xb7, 0xd1, 0x8, 0x19d2, 0x1140, 0x9199, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0xb}}, {{0x9, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x1e}}]}}]}}]}}, 0x0) 19:50:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f00000001c0)="fc0000001c00071bab092500090007000aab08330200000000004c93210001c000000000000000000000740000039815fa2c1ec28656aaa79bb96b46fe000000bc00020000036c6c256f1a272fdfff7f512fd633d440000076000089aa6a216a4ec40cfc08f00472e9b1918a55f5e3ffcde88e3e34d07302ade01720d3d5bbe633439bc7775f7d981c69260c71423e2e80772c05de18444ef92e475eb8b29d3ef3d92c83170e5bba53463ae4f5566f91cf190201dee515ff0d8dd3f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe442cab15db68f0f1d297ad7af3d0041f0d4d75cd3f4ff2d4d375040", 0xfc) 19:50:12 executing program 0: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f) 19:50:12 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000080)='\'', 0x1}], 0x10000077, 0x1081804) 19:50:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 19:50:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4, 0xfffffffffffffffe}]}, 0x30}}, 0x0) [ 1420.042887][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1420.053822][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1420.061629][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1420.069505][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1420.077473][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1420.085552][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1420.093776][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 19:50:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="ad", 0x1) sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9e", 0x1}], 0x1, &(0x7f00000002c0)=[@iv={0x18}], 0x18}, 0x0) 19:50:12 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair(0x9, 0x6, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x100, 0x8, 0x54, 0x7f}, 0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0xc, &(0x7f0000000000), 0x8) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000001540)={0x9, @pix={0x3f, 0x12e, 0x4f424752, 0x4, 0x80, 0x7, 0x3, 0x8, 0x1, 0x0, 0x1, 0x6}}) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = userfaultfd(0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0xc, &(0x7f0000000000), 0x8) r13 = dup2(r10, r12) dup3(r13, r11, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r13, 0xc1105511, &(0x7f0000001400)={{0x2, 0x0, 0x3ff, 0x1, 'syz0\x00', 0x3}, 0x0, 0x20, 0xd2f, r0, 0x6, 0x6, 'syz0\x00', &(0x7f0000000180)=['cgroup.procs\x00', '\x00', '\'eth1}\x00', ';)security\x00', '+\x00', '/dev/nullb0\x00'], 0x2e, [], [0x3, 0x3f]}) 19:50:12 executing program 0: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f) 19:50:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 19:50:12 executing program 0: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f) 19:50:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb82194", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1420.463617][T19770] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1420.703850][T19770] usb 6-1: Using ep0 maxpacket: 8 [ 1420.823942][T19770] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1420.832270][T19770] usb 6-1: config 0 has no interface number 0 [ 1420.838721][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1420.849456][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1420.860190][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1420.870948][T19770] usb 6-1: New USB device found, idVendor=19d2, idProduct=1140, bcdDevice=91.99 [ 1420.880205][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.894233][T19770] usb 6-1: config 0 descriptor?? [ 1420.905116][ C1] net_ratelimit: 26 callbacks suppressed [ 1420.905137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.918100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.937729][T19770] option 6-1:0.20: GSM modem (1-port) converter detected [ 1420.984733][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.991848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.999524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1421.006668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1421.014274][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1421.021295][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1421.145931][T28657] usb 6-1: USB disconnect, device number 89 [ 1421.153112][T28657] option 6-1:0.20: device disconnected 19:50:13 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xfb, 0xb7, 0xd1, 0x8, 0x19d2, 0x1140, 0x9199, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0xb}}, {{0x9, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x1e}}]}}]}}]}}, 0x0) 19:50:13 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000006000)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000033c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 19:50:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 19:50:13 executing program 0: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f) 19:50:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair(0x9, 0x6, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x100, 0x8, 0x54, 0x7f}, 0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0xc, &(0x7f0000000000), 0x8) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000001540)={0x9, @pix={0x3f, 0x12e, 0x4f424752, 0x4, 0x80, 0x7, 0x3, 0x8, 0x1, 0x0, 0x1, 0x6}}) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = userfaultfd(0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0xc, &(0x7f0000000000), 0x8) r13 = dup2(r10, r12) dup3(r13, r11, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r13, 0xc1105511, &(0x7f0000001400)={{0x2, 0x0, 0x3ff, 0x1, 'syz0\x00', 0x3}, 0x0, 0x20, 0xd2f, r0, 0x6, 0x6, 'syz0\x00', &(0x7f0000000180)=['cgroup.procs\x00', '\x00', '\'eth1}\x00', ';)security\x00', '+\x00', '/dev/nullb0\x00'], 0x2e, [], [0x3, 0x3f]}) [ 1421.703689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1421.710262][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:50:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 19:50:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 19:50:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000280)="39000000140081ae00002c000500018701546fabcae5e5741af20f367c355fee27a04f7e0592616675e285af71583c7d06a6580e883795c0c5", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) [ 1421.936076][ T5989] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1421.986638][ T5993] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:50:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca116b02eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271e4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, r3, {0xfff4}}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 1422.033524][T19770] usb 6-1: new high-speed USB device number 90 using dummy_hcd 19:50:14 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x502, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000fffd}) 19:50:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) [ 1422.283499][T19770] usb 6-1: Using ep0 maxpacket: 8 [ 1422.413754][T19770] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1422.422065][T19770] usb 6-1: config 0 has no interface number 0 [ 1422.428668][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1422.439367][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1422.450149][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1422.460870][T19770] usb 6-1: New USB device found, idVendor=19d2, idProduct=1140, bcdDevice=91.99 [ 1422.470070][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.535806][T19770] usb 6-1: config 0 descriptor?? [ 1422.579071][T19770] option 6-1:0.20: GSM modem (1-port) converter detected [ 1422.785673][T19770] usb 6-1: USB disconnect, device number 90 [ 1422.792907][T19770] option 6-1:0.20: device disconnected 19:50:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb82194", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:50:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4000009d], [0xc1]}) 19:50:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfc9, 0x0) 19:50:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 19:50:15 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair(0x9, 0x6, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x100, 0x8, 0x54, 0x7f}, 0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0xc, &(0x7f0000000000), 0x8) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000001540)={0x9, @pix={0x3f, 0x12e, 0x4f424752, 0x4, 0x80, 0x7, 0x3, 0x8, 0x1, 0x0, 0x1, 0x6}}) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = userfaultfd(0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0xc, &(0x7f0000000000), 0x8) r13 = dup2(r10, r12) dup3(r13, r11, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r13, 0xc1105511, &(0x7f0000001400)={{0x2, 0x0, 0x3ff, 0x1, 'syz0\x00', 0x3}, 0x0, 0x20, 0xd2f, r0, 0x6, 0x6, 'syz0\x00', &(0x7f0000000180)=['cgroup.procs\x00', '\x00', '\'eth1}\x00', ';)security\x00', '+\x00', '/dev/nullb0\x00'], 0x2e, [], [0x3, 0x3f]}) 19:50:15 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xfb, 0xb7, 0xd1, 0x8, 0x19d2, 0x1140, 0x9199, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0xb}}, {{0x9, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x1e}}]}}]}}]}}, 0x0) 19:50:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:50:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x2, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint}, {0x0, 0x1, 0x0, 0x0, @msi}]}) 19:50:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 1423.933325][T19770] usb 6-1: new high-speed USB device number 91 using dummy_hcd 19:50:16 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 1424.173374][T19770] usb 6-1: Using ep0 maxpacket: 8 [ 1424.295340][T19770] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1424.303698][T19770] usb 6-1: config 0 has no interface number 0 [ 1424.310039][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1424.320839][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1424.331696][T19770] usb 6-1: config 0 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping 19:50:16 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 1424.342566][T19770] usb 6-1: New USB device found, idVendor=19d2, idProduct=1140, bcdDevice=91.99 [ 1424.351959][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.365969][T19770] usb 6-1: config 0 descriptor?? 19:50:16 executing program 4: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') fchdir(r0) getcwd(0x0, 0x1586) [ 1424.407709][T19770] option 6-1:0.20: GSM modem (1-port) converter detected [ 1424.631916][T19770] usb 6-1: USB disconnect, device number 91 [ 1424.656234][T19770] option 6-1:0.20: device disconnected 19:50:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb82194", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:50:18 executing program 4: r0 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2, 0x8de7d8f023d013d7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000240), &(0x7f00000002c0)=0xc) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x68}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 19:50:18 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x97, &(0x7f0000000140), &(0x7f0000000040)=0xc6) 19:50:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x5000, 0x0, 0x7ff, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:18 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair(0x9, 0x6, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x100, 0x8, 0x54, 0x7f}, 0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0xc, &(0x7f0000000000), 0x8) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000001540)={0x9, @pix={0x3f, 0x12e, 0x4f424752, 0x4, 0x80, 0x7, 0x3, 0x8, 0x1, 0x0, 0x1, 0x6}}) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = userfaultfd(0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0xc, &(0x7f0000000000), 0x8) r13 = dup2(r10, r12) dup3(r13, r11, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r13, 0xc1105511, &(0x7f0000001400)={{0x2, 0x0, 0x3ff, 0x1, 'syz0\x00', 0x3}, 0x0, 0x20, 0xd2f, r0, 0x6, 0x6, 'syz0\x00', &(0x7f0000000180)=['cgroup.procs\x00', '\x00', '\'eth1}\x00', ';)security\x00', '+\x00', '/dev/nullb0\x00'], 0x2e, [], [0x3, 0x3f]}) 19:50:18 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r0) syz_usb_disconnect(r2) 19:50:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) 19:50:19 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80002, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="e1348bc48ccbbb28f43dcdd5d3ee09d0a12cfd10724d95b0a9c785733e0a8c3183844cf76ff10ffb1e92570979e97cc0d34873a7a2f87054", 0x38}, {&(0x7f0000002040)="e0b86108", 0x4}], 0x2) [ 1427.043700][T28657] usb 6-1: new high-speed USB device number 92 using dummy_hcd 19:50:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000100), &(0x7f00000001c0), 0x1}, 0x20) [ 1427.143686][ C1] net_ratelimit: 26 callbacks suppressed [ 1427.143711][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1427.155979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1427.223694][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1427.230023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1427.236554][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1427.242771][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1427.249302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1427.255589][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:50:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x98f907, 0x4}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x259) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000100)=""/50, 0x0, 0x2402}}, 0x68) write$vnet(r1, &(0x7f0000000440)={0x1, {&(0x7f0000000040)=""/80, 0x50, &(0x7f00000001c0)=""/142, 0x0, 0x2}}, 0x68) write$vnet(r1, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xffffffc7, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) msgrcv(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095d5be2c9907cec43ccdb32c21638f1ddf47c51ef1ffdb7890ca865f8131ff9f5bc6b6933cdbed3e7f57216448b6de81c3dc88febef930f893a06a5386d6f99f9dd02a7e52ee630dab0ef72a9541f6f782bd20f0337c5e8b566394afc8bf46ca4170e7cddb69b07f08349a5d8bb16fd6a55e0ee4a39c3ca748d58c7e0ab922bc0cb9e20e1c8e547fcc88edc18fe4e25f691cb57df4fea8c461c02ada774acff4dce3360bc80822ebfc51bb3f6d1a66c78998b86b455f412e448e73388a00fac805b83ceb4ba145a762387019dd0a9fce89a6b074f4e4a981f5c21201be7ce30f5d46f92cc60a4f39fb45736f5b3ff3914c"], 0xfffffee7, 0x1, 0x2000) 19:50:19 executing program 1: add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040), &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) [ 1427.445887][T28657] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 1427.454398][T28657] usb 6-1: config 0 has no interface number 0 [ 1427.460688][T28657] usb 6-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1427.471484][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1427.482981][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1427.494386][T28657] usb 6-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1427.507634][T28657] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1427.516851][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.631584][T28657] usb 6-1: config 0 descriptor?? [ 1427.691999][T28657] iowarrior 6-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 1427.944289][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1427.950509][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1428.085769][T28657] usb 6-1: USB disconnect, device number 92 [ 1428.098135][T28657] iowarrior 6-1:0.135: I/O-Warror #0 now disconnected [ 1429.263370][T28657] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1429.623490][T28657] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 1429.631767][T28657] usb 6-1: config 0 has no interface number 0 [ 1429.638088][T28657] usb 6-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1429.648850][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1429.660471][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1429.671927][T28657] usb 6-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1429.685269][T28657] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1429.694531][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.704831][T28657] usb 6-1: config 0 descriptor?? [ 1429.755593][T28657] iowarrior 6-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 1429.802912][ T3372] usb 6-1: USB disconnect, device number 93 [ 1429.812350][ T3372] iowarrior 6-1:0.135: I/O-Warror #0 now disconnected 19:50:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb82194", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:50:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0xc0ffffff, 0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff77}, 0x48) 19:50:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0^\xc0C\xab\xb1\x11\xae\x00', 0x0, 0x0, [], [0xfff]}) 19:50:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0010000, 0x0, 0xc0010140], [0xc1]}) 19:50:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @pix={0x0, 0x0, 0x35315842}}) 19:50:21 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r0) syz_usb_disconnect(r2) 19:50:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000340)='G', 0x1}], 0x1, 0x0) 19:50:22 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6368616e676570726f66696c65203a00cb09a1ba23c86b6fce4fa75b92867f7813b24cf7036c3c4d759f42b176ff0d7f07d2a0c711d7f70349c74be40be656d6436e2e5b6d0eea90f43a31135593659c6411afbdd3004bd06436be9f559311a7c0f0221a5d244a"], 0x10) 19:50:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='w-'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x40, 0xa, 0x0, "8cac3a94aa7dfd73c37b6187fc5a11e774c84a936b60a327949ce1273b94266c"}) 19:50:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60}, 0x60) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 19:50:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x44, 0x6, 0x0, @rand_addr="9b057dbfdc26999839fdd1f4f4c76bfc", @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6f91d69477164819b26dc0b087897228"}, @md5sig={0x13, 0x12, "c860d590869e2d24cef4681b1958f9ab"}, @mptcp=@mp_fclose={0x1e, 0xc}]}}}}}}}}, 0x0) [ 1430.286717][ T3372] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1430.673614][ T3372] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 1430.681962][ T3372] usb 6-1: config 0 has no interface number 0 [ 1430.688322][ T3372] usb 6-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1430.699106][ T3372] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1430.710569][ T3372] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1430.721930][ T3372] usb 6-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1430.735208][ T3372] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1430.744518][ T3372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.754233][ T3372] usb 6-1: config 0 descriptor?? [ 1430.800788][ T3372] iowarrior 6-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 1431.206266][T28657] usb 6-1: USB disconnect, device number 94 [ 1431.216455][T28657] iowarrior 6-1:0.135: I/O-Warror #0 now disconnected 19:50:25 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r0) syz_usb_disconnect(r2) 19:50:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x10063, 0x0, 0x0) 19:50:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='w-'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:25 executing program 0: syz_emit_ethernet(0x8e, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x58, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x29, 0x0, @loopback, @dev, [@srh={0x0, 0x4, 0x4, 0x29, 0x0, 0x0, 0x0, [@local, @mcast1]}]}}}}}}}, 0x0) 19:50:25 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn={0x1, 0x1, [0x0]}, @padn]}]}}}}}}}, 0x0) 19:50:25 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 040'], 0x1, 0x0) r0 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x1d1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 19:50:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_open_procfs(0x0, &(0x7f0000272000)) [ 1433.079095][ T6464] encrypted_key: keyword 'new' not allowed when called from .update method 19:50:25 executing program 3: keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={'xcb-(((st5(\x00'}}) 19:50:25 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc0, &(0x7f0000000040), &(0x7f00000000c0)=0x3b8c3dfc45cf9699) 19:50:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='w-'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1433.303859][T28657] usb 6-1: new high-speed USB device number 95 using dummy_hcd 19:50:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000002e, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000003240)) [ 1433.383758][ C1] net_ratelimit: 26 callbacks suppressed [ 1433.383782][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1433.396019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1433.440412][ T6473] could not allocate digest TFM handle xcb-(((st5( [ 1433.463979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1433.470261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1433.476783][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1433.483397][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1433.489792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1433.496151][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1433.535876][ T6473] could not allocate digest TFM handle xcb-(((st5( 19:50:25 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x40096101, 0x0) [ 1433.705986][T28657] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 1433.714412][T28657] usb 6-1: config 0 has no interface number 0 [ 1433.720613][T28657] usb 6-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1433.731461][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1433.742964][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1433.754377][T28657] usb 6-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1433.765441][ T6496] QAT: failed to copy from user cfg_data. [ 1433.767609][T28657] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1433.782455][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.832610][T28657] usb 6-1: config 0 descriptor?? [ 1433.889636][T28657] iowarrior 6-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 1434.183515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.189596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1434.292929][ T3372] usb 6-1: USB disconnect, device number 95 [ 1434.315296][ T3372] iowarrior 6-1:0.135: I/O-Warror #0 now disconnected 19:50:27 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r0) syz_usb_disconnect(r2) 19:50:27 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") open(&(0x7f000000fffa)='./bus\x00', 0x151142, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./bus\x00', 0x20000a0) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) dup3(r0, r2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 19:50:27 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) memfd_create(&(0x7f0000000040)='\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) 19:50:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='w-'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x0, 0x4}) 19:50:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x176], [0x3a]}) 19:50:27 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="5500000018007f5300fe01b2a4a280930a60000000a8430891ed000039000100fec0ffff000000001900a30700000000000000dc1338d54400009b841338caaee86ef75afbe30109a3de44656b0000000000000000", 0x55}], 0x1}, 0x0) 19:50:27 executing program 3: open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) clone(0x4007ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 19:50:27 executing program 4: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:50:27 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") open(&(0x7f000000fffa)='./bus\x00', 0x151142, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./bus\x00', 0x20000a0) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) dup3(r0, r2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 19:50:27 executing program 3: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x60ff, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, 0x0]) [ 1435.534893][ T6623] IPv6: Can't replace route, no match found [ 1435.555418][T28657] usb 6-1: new high-speed USB device number 96 using dummy_hcd 19:50:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x5, "8c3544b0"}]}}, 0x0}, 0x0) [ 1435.943796][T28657] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 1435.952243][T28657] usb 6-1: config 0 has no interface number 0 [ 1435.958560][T28657] usb 6-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1435.969446][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1435.981028][T28657] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1435.992486][T28657] usb 6-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1436.005894][T28657] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1436.015165][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.025276][T28657] usb 6-1: config 0 descriptor?? [ 1436.070719][T28657] iowarrior 6-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 1436.093453][ T28] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1436.333256][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 1436.453401][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.464671][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1436.477668][ T28] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 1436.486922][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.496172][ T3372] usb 6-1: USB disconnect, device number 96 [ 1436.496225][ T28] usb 2-1: config 0 descriptor?? [ 1436.525687][ T3372] iowarrior 6-1:0.135: I/O-Warror #0 now disconnected [ 1436.976901][ T28] microsoft 0003:045E:009D.0063: unbalanced collection at end of report description [ 1436.987043][ T28] microsoft 0003:045E:009D.0063: parse failed [ 1436.993472][ T28] microsoft: probe of 0003:045E:009D.0063 failed with error -22 [ 1437.179635][ T3372] usb 2-1: USB disconnect, device number 77 19:50:29 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) unshare(0x2060400) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000300)={0x32}) 19:50:29 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 19:50:29 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") open(&(0x7f000000fffa)='./bus\x00', 0x151142, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./bus\x00', 0x20000a0) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) dup3(r0, r2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 19:50:29 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x9}) 19:50:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='GPL&K+posix_acl_accessmd5sum\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:29 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2000200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r3, 0x0) clone(0xf9224100, 0x0, 0x0, 0x0, 0x0) 19:50:29 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") open(&(0x7f000000fffa)='./bus\x00', 0x151142, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./bus\x00', 0x20000a0) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) dup3(r0, r2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 19:50:29 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000180), &(0x7f00000001c0), 0x8) [ 1437.642282][ T6660] IPVS: ftp: loaded support on port[0] = 21 [ 1437.733850][ T28] usb 3-1: new high-speed USB device number 110 using dummy_hcd 19:50:29 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2000200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r3, 0x0) clone(0xf9224100, 0x0, 0x0, 0x0, 0x0) 19:50:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r5, 0x8004ae98, 0x70f000) [ 1437.953685][T28657] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1437.973517][ T28] usb 3-1: Using ep0 maxpacket: 8 19:50:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) [ 1438.052082][ T6679] IPVS: ftp: loaded support on port[0] = 21 [ 1438.093929][ T28] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1438.102197][ T28] usb 3-1: config 0 has no interface number 0 [ 1438.108960][ T28] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1438.120068][ T28] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1438.129363][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.169211][ T28] usb 3-1: config 0 descriptor?? [ 1438.196842][T28657] usb 2-1: Using ep0 maxpacket: 8 [ 1438.224589][ T28] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1438.313813][T28657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.325409][T28657] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1438.338467][T28657] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 1438.347712][T28657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.362477][T28657] usb 2-1: config 0 descriptor?? [ 1438.425017][ T28] usb 3-1: USB disconnect, device number 110 [ 1438.437085][ T28] ldusb 3-1:0.28: LD USB Device #0 now disconnected [ 1438.666442][T28657] microsoft 0003:045E:009D.0064: unbalanced collection at end of report description [ 1438.676608][T28657] microsoft 0003:045E:009D.0064: parse failed [ 1438.682917][T28657] microsoft: probe of 0003:045E:009D.0064 failed with error -22 19:50:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0x5f5e0ff, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 19:50:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='GPL&K+posix_acl_accessmd5sum\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1438.724905][ T3372] usb 2-1: USB disconnect, device number 78 [ 1439.203503][T19770] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1439.463284][T19770] usb 3-1: Using ep0 maxpacket: 8 [ 1439.593411][T19770] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1439.601605][T19770] usb 3-1: config 0 has no interface number 0 [ 1439.607963][T19770] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1439.618974][T19770] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1439.628205][T19770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.633670][ C1] net_ratelimit: 26 callbacks suppressed [ 1439.633690][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.638141][T19770] usb 3-1: config 0 descriptor?? [ 1439.642302][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1439.688842][T19770] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1439.703882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.709991][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1439.716537][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.723028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1439.729561][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.735691][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1439.886868][T28657] usb 3-1: USB disconnect, device number 111 [ 1439.905369][T28657] ldusb 3-1:0.28: LD USB Device #0 now disconnected 19:50:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @hyper}}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:50:32 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2000200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r3, 0x0) clone(0xf9224100, 0x0, 0x0, 0x0, 0x0) 19:50:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) fsync(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 19:50:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) 19:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x40600) ioctl$EXT4_IOC_SETFLAGS(r0, 0x80284502, 0x0) 19:50:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='GPL&K+posix_acl_accessmd5sum\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1440.423732][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.430129][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:50:32 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000706ffc)) [ 1440.568712][ T6816] IPVS: ftp: loaded support on port[0] = 21 19:50:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) 19:50:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 19:50:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000340)=[{r1, 0x40}], 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0), 0x8) 19:50:32 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x009\xd6\xfe\xa7\x81\xc9\xe1\x88\xb6\xd3\xadX\xf6\xdb\xfa./?+q\xfe\x8b\x11=\xe4\xaa\v9\xdbs#\v\xec\xac\x95\xd6\xe3\xad\xba}\xc1a\xa5\v\xff\xd5|\xe1#\x01;!\xd0\x1e\x0e\xe5\xc9\x14\xd3r\xd6\fe\xde\xfau\x99\xfa\x0f(\x93M\xfc\xa6_\xee\xa0#mDQ`\xad\xa08@S\xde\x1e\x8eIs)\xe3\xd3\xbd\x94j\xa2\xbf\xdb\x0ex\x9f\v\x9d\x90\xab\x1a\xfd\xc4\x9e\x8f\x1f\xa5\xe0\xf9\x04\t\xd4QC\v\xe0\x825y*', 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000004c0), 0x12) sendfile(r1, r3, 0x0, 0x4) 19:50:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) 19:50:33 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2000200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r3, 0x0) clone(0xf9224100, 0x0, 0x0, 0x0, 0x0) 19:50:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 19:50:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='GPL&K+posix_acl_accessmd5sum\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1441.174264][ T6856] IPVS: ftp: loaded support on port[0] = 21 19:50:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xf, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) [ 1441.303390][T19770] usb 2-1: new high-speed USB device number 79 using dummy_hcd 19:50:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 19:50:33 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x989680}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:50:33 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) [ 1441.543385][T19770] usb 2-1: Using ep0 maxpacket: 8 19:50:33 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) [ 1441.659425][ T6877] input: syz1 as /devices/virtual/input/input200 [ 1441.673643][T19770] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.684204][T19770] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.695591][T19770] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1441.705520][T19770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:50:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x5c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x48, 0x11, [@generic="802fc3af0d982db5279ce2edea4b1e3bf632fa62b12b5d31706d704884f7216f30ce3b973da2fc2d36601358e4eef293b8407b6350ad4b0546cb7f4a1439e48fda"]}]}, 0x5c}, 0x1, 0x6087ffffffff}, 0x0) 19:50:33 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) [ 1441.905431][T19770] hub 2-1:118.0: ignoring external hub [ 1441.954118][T19770] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1442.226519][T28657] usb 2-1: USB disconnect, device number 79 [ 1443.013360][T19770] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1443.263350][T19770] usb 2-1: Using ep0 maxpacket: 8 [ 1443.383622][T19770] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.394173][T19770] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.405420][T19770] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1443.414713][T19770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.465455][T19770] hub 2-1:118.0: ignoring external hub [ 1443.477338][T19770] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1445.863541][ C1] net_ratelimit: 26 callbacks suppressed [ 1445.863554][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.875464][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.943844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.949879][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.956255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.962409][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.968815][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.974905][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.663757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.669789][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:50:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x8b8f}) 19:50:39 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) 19:50:39 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:50:39 executing program 0: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80084121, 0x0) 19:50:39 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x989680}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:50:39 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) [ 1447.806307][ T6844] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1447.814023][T28657] usb 2-1: USB disconnect, device number 80 19:50:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x18) 19:50:40 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) 19:50:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x22, 0x2, 0x24) close(r1) 19:50:40 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) [ 1448.172768][ T6932] delete_channel: no stack [ 1448.205801][ T6924] cgroup: fork rejected by pids controller in /syz5 [ 1448.238002][ T6930] delete_channel: no stack 19:50:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000c00)="84", 0x1}]) 19:50:40 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x1f000000}, 0x0, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1}, 0x20) 19:50:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x364, 0x24004048, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 19:50:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 19:50:40 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:50:40 executing program 4: unshare(0x8000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup(r2) 19:50:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 19:50:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 19:50:40 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x989680}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:50:41 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010001000260200304e9f99bc2fffa000109021b0001000000000904de0001f4e4330009058e000000000000"], 0x0) 19:50:41 executing program 5: unshare(0x400) r0 = socket$kcm(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) [ 1449.101765][ T7175] loop_set_block_size: loop0 () has still dirty pages (nrpages=15) 19:50:41 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 1449.363622][T19770] usb 4-1: new high-speed USB device number 90 using dummy_hcd 19:50:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) [ 1449.603481][T19770] usb 4-1: Using ep0 maxpacket: 32 19:50:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 19:50:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) [ 1449.724327][T19770] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 1449.732610][T19770] usb 4-1: config 0 has no interface number 0 19:50:41 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x989680}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1449.883728][T19770] usb 4-1: New USB device found, idVendor=0403, idProduct=f9e9, bcdDevice=c2.9b [ 1449.892987][T19770] usb 4-1: New USB device strings: Mfr=255, Product=250, SerialNumber=0 [ 1449.901932][T19770] usb 4-1: Product: syz [ 1449.906307][T19770] usb 4-1: Manufacturer: syz 19:50:42 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 1449.996256][T19770] usb 4-1: config 0 descriptor?? [ 1450.055392][T19770] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.222/input/input202 [ 1450.077643][ T7305] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) 19:50:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 19:50:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) [ 1450.237135][T28657] usb 4-1: USB disconnect, device number 90 19:50:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) 19:50:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) [ 1450.838350][ T7326] loop_set_block_size: loop0 () has still dirty pages (nrpages=32) [ 1451.023388][T19770] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1451.273453][T19770] usb 4-1: Using ep0 maxpacket: 32 [ 1451.393526][T19770] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 1451.401924][T19770] usb 4-1: config 0 has no interface number 0 [ 1451.523516][T19770] usb 4-1: New USB device found, idVendor=0403, idProduct=f9e9, bcdDevice=c2.9b [ 1451.532765][T19770] usb 4-1: New USB device strings: Mfr=255, Product=250, SerialNumber=0 [ 1451.541405][T19770] usb 4-1: Product: syz [ 1451.545785][T19770] usb 4-1: Manufacturer: syz [ 1451.551801][T19770] usb 4-1: config 0 descriptor?? [ 1451.597236][T19770] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.222/input/input203 [ 1451.795231][T19770] usb 4-1: USB disconnect, device number 91 19:50:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f070fc72bc4e298f30966baf80cb8145e5588ef66bafc0cb886da6a53ef660f0f19b0c4e39179ed030f221f0f20c035000001000f22c0f30fc77600660f38401cdf", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 19:50:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x7, 0x0) semop(r2, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x40}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xfffffffffffffffc}, {0x1, 0xfffffffffffffff8}], 0x7) semop(r2, &(0x7f0000000240), 0x6) 19:50:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x32}, 0x0, @in6}]}, @mark={0xc, 0x15, {0x0, 0xfffffffffffffffe}}]}, 0x178}}, 0x0) 19:50:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 19:50:44 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 1452.103811][ C1] net_ratelimit: 26 callbacks suppressed [ 1452.103832][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.116239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1452.183803][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.190100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1452.196670][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.202909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1452.209392][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.215679][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:50:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000000)={0x0, 0x0, 0x6, "0330ffffff42"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:50:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, 0x26}) 19:50:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x0, @empty, 0x3}, {0xa, 0x4e23, 0x10001, @local}, 0x0, [0x9, 0xfffffffc, 0x400, 0xb5, 0x9, 0x0, 0x9, 0x7fffffff]}, 0x5c) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/p\xfd\xfcc/ser/current\x00 \x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e0000001ac1414aa00000e0002000000ac1e0001e7eb9d3a2ca3ebb72f000000000b97b7d89e0c42f8339d1008d1478f05ce3a59afc49c1d4d8a376615c3969ab99288ef0f2e960500"], 0x18) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 19:50:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=@hat={'changehat ', 0x0, 0x5e, ['^trustedmime_typewlan1[mime_typeX@\x00', 'ppp1(,wlan0\x00']}, 0x4c) [ 1452.694012][T19770] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1452.729225][ T31] audit: type=1400 audit(1571601044.778:44): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7364 comm="syz-executor.2" 19:50:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f070fc72bc4e298f30966baf80cb8145e5588ef66bafc0cb886da6a53ef660f0f19b0c4e39179ed030f221f0f20c035000001000f22c0f30fc77600660f38401cdf", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x2}, 0x2c) [ 1452.904001][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.910399][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:50:45 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="d97ee00f018a", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@lsrr={0x83, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 1452.944419][T19770] usb 6-1: Using ep0 maxpacket: 16 19:50:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000200000000000080012000200020000000000000000003000320003010000000000000000000000000000000000000000000000000001ac1414bb000000ffff00000000000000030005000000000002000000e00000010000000000000000717e5d17fa6854070c5766ac03d6380ab5b640e6ca532f3cf532c8bde96e3cee337e06cef76b20f0ecfc10ae0fdb57c7aa97f77b6994448aa776cf6824f956e8482cee4fb8b45042"], 0x80}}, 0x0) [ 1453.064443][T19770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53 [ 1453.073712][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.106925][T19770] usb 6-1: config 0 descriptor?? 19:50:45 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)=0x1) syz_open_dev$dspn(0x0, 0x0, 0x0) 19:50:45 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="d97ee00f018a", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@lsrr={0x83, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 19:50:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x3}) poll(&(0x7f0000000100)=[{r0}, {}], 0x46, 0x0) 19:50:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffee3, 0x0, 0x0, 0xfffffffffffffd9c) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x0, 0x6860290f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1453.370292][T19770] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1453.815518][T19770] usb write operation failed. (-71) [ 1453.825219][T19770] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1453.836105][T19770] dvbdev: DVB: registering new adapter (Terratec H7) [ 1453.842943][T19770] usb 6-1: media controller created [ 1453.864538][T19770] usb read operation failed. (-71) [ 1453.883478][T19770] usb write operation failed. (-71) [ 1453.892725][T19770] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 1453.913810][T19770] usb 6-1: USB disconnect, device number 97 [ 1454.593367][T19770] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1454.843349][T19770] usb 6-1: Using ep0 maxpacket: 16 [ 1454.963525][T19770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53 [ 1454.972754][T19770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.982528][T19770] usb 6-1: config 0 descriptor?? 19:50:47 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="d97ee00f018a", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@lsrr={0x83, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 19:50:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f070fc72bc4e298f30966baf80cb8145e5588ef66bafc0cb886da6a53ef660f0f19b0c4e39179ed030f221f0f20c035000001000f22c0f30fc77600660f38401cdf", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x1, 0x0, 0x80, 0x2f, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000100)={0x80, 0x8, [0x9, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)=0x1) syz_open_dev$dspn(0x0, 0x0, 0x0) 19:50:47 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xef, 0x96, 0x77, 0x20, 0x5ac, 0x290, 0x4e5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) 19:50:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x3}) poll(&(0x7f0000000100)=[{r0}, {}], 0x46, 0x0) [ 1455.385705][T19770] usb read operation failed. (-71) [ 1455.403476][T19770] usb write operation failed. (-71) [ 1455.426934][T19770] usb write operation failed. (-71) [ 1455.474874][T19770] usb write operation failed. (-71) [ 1455.480240][T19770] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1455.488989][T19770] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1455.499013][T19770] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1455.516165][T19770] dvb_usb_az6007: probe of 6-1:0.0 failed with error -2 [ 1455.554898][ T7416] picdev_read: 16 callbacks suppressed [ 1455.554912][ T7416] kvm: pic: non byte read [ 1455.584412][T19770] usb 6-1: USB disconnect, device number 98 [ 1455.616511][ T7416] kvm: pic: non byte read 19:50:47 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="d97ee00f018a", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@lsrr={0x83, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 1455.641636][ T7416] picdev_write: 6 callbacks suppressed [ 1455.641659][ T7416] kvm: pic: non byte write [ 1455.663530][ T7416] kvm: pic: non byte read [ 1455.679985][ T7416] kvm: pic: non byte read [ 1455.695973][ T7416] kvm: pic: non byte write [ 1455.700871][ T7416] kvm: pic: non byte read [ 1455.723566][ T2831] usb 5-1: new high-speed USB device number 18 using dummy_hcd 19:50:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f070fc72bc4e298f30966baf80cb8145e5588ef66bafc0cb886da6a53ef660f0f19b0c4e39179ed030f221f0f20c035000001000f22c0f30fc77600660f38401cdf", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)=0x1) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 1455.893024][ T7416] pic_ioport_write: 17 callbacks suppressed [ 1455.893039][ T7416] kvm: pic: single mode not supported [ 1455.893066][ T7416] pic_ioport_write: 10 callbacks suppressed 19:50:48 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x1d, 0x0, &(0x7f0000000240)) [ 1455.911132][ T7416] kvm: pic: level sensitive irq not supported [ 1455.955668][ T7416] kvm: pic: level sensitive irq not supported [ 1455.955994][ T7416] kvm: pic: single mode not supported [ 1455.962192][ T7416] kvm: pic: level sensitive irq not supported [ 1455.963561][ T2831] usb 5-1: Using ep0 maxpacket: 32 19:50:48 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000240)="2400000021002551075c0165ff0ffc020200000300100f01b8e1000c080018008000a000", 0x24) [ 1456.123924][ T2831] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 1456.126881][ T7437] kvm: pic: non byte read [ 1456.132264][ T2831] usb 5-1: config 0 has no interface number 0 [ 1456.142820][ T2831] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=4e.5d [ 1456.152070][ T2831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.157474][ T7437] kvm: pic: non byte write 19:50:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x3}) poll(&(0x7f0000000100)=[{r0}, {}], 0x46, 0x0) [ 1456.170948][ T2831] usb 5-1: config 0 descriptor?? 19:50:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x13, r0, 0x0) [ 1456.245164][ T2831] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.164/input/input204 19:50:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x1, 0x0, 0x80, 0x2f, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000100)={0x80, 0x8, [0x9, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1456.424487][ T2831] usb 5-1: USB disconnect, device number 18 19:50:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1c, 0x201, 0x0, 0x0, {0x7, 0xf00}}, 0x20}}, 0x0) 19:50:48 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)=0x1) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 1456.633888][ T7452] kvm: pic: non byte read [ 1456.670749][ T7452] kvm: pic: non byte read [ 1456.685244][ T7452] kvm: pic: non byte write [ 1456.716339][ T7452] kvm: pic: non byte read [ 1456.726324][ T7452] kvm: pic: non byte read [ 1456.745172][ T7452] kvm: pic: non byte write [ 1456.827653][ T7452] kvm: pic: single mode not supported [ 1456.827670][ T7452] kvm: pic: level sensitive irq not supported [ 1456.858572][ T7452] kvm: pic: level sensitive irq not supported [ 1456.859609][ T7452] kvm: pic: single mode not supported [ 1456.866193][ T7452] kvm: pic: level sensitive irq not supported [ 1456.877330][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1457.203351][ T2831] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1457.443384][ T2831] usb 5-1: Using ep0 maxpacket: 32 [ 1457.583515][ T2831] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 1457.591818][ T2831] usb 5-1: config 0 has no interface number 0 [ 1457.598155][ T2831] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=4e.5d [ 1457.607417][ T2831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.617002][ T2831] usb 5-1: config 0 descriptor?? [ 1457.660165][ T2831] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.164/input/input205 [ 1457.855437][ T2831] usb 5-1: USB disconnect, device number 19 19:50:50 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100002552eb104c05c3061b94000000010902240001000000000904a9b69460978d1f98aa95d7b9000227c5560009050ee400000000000905817e9b011200000000009d654fa8f7f58f6fc69da3c96a8e5fff331f39540d0991501bc958480d12622a44ab201f117039da16ad5b222a14"], 0x0) 19:50:50 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x82, 0x7d, 0xde, 0x8, 0x6e1, 0xa333, 0x1942, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0xe6, 0xf4, 0xff}}]}}]}}, 0x0) 19:50:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f0000000080)={0x94}) 19:50:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x3}) poll(&(0x7f0000000100)=[{r0}, {}], 0x46, 0x0) 19:50:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x1, 0x0, 0x80, 0x2f, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000100)={0x80, 0x8, [0x9, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = dup2(r2, r2) dup2(r3, r1) [ 1458.343663][ C1] net_ratelimit: 26 callbacks suppressed [ 1458.343687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.355708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.424024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.430344][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.437006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.443458][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.450007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.456454][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:50:50 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000000)) dup2(r0, r1) 19:50:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x1, 0x0, 0x80, 0x2f, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000100)={0x80, 0x8, [0x9, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:50 executing program 2: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="ed21eabb293bf7ee5fb544d0418ec5d65596b7fc1a", 0x15}, {&(0x7f00000009c0)="49b0df69f84582674fb6a48eb322234596f009", 0x13}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="13", 0x1}, {&(0x7f0000000200)="641c53598c2ca8aabd097d526abbfdfc7bf7638a906df4b7c6dfbd5862de76e51d3a8d073a35ca", 0x27}], 0x2}}], 0x2, 0x0) [ 1458.733941][T28657] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1458.743498][ T2831] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1458.808685][ T7490] kvm: pic: non byte write 19:50:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) [ 1458.844472][ T7490] kvm: pic: non byte write 19:50:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1000) [ 1458.932519][ T7490] kvm: pic: single mode not supported [ 1458.932535][ T7490] kvm: pic: level sensitive irq not supported 19:50:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@polexpire={0xcc, 0x1b, 0x221, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote}}}, [@policy_type={0xc}]}, 0xcc}, 0x8}, 0x0) [ 1458.979597][ T7490] kvm: pic: level sensitive irq not supported [ 1458.979940][ T7490] kvm: pic: single mode not supported [ 1458.986381][ T7490] kvm: pic: level sensitive irq not supported [ 1458.992348][T28657] usb 4-1: Using ep0 maxpacket: 8 [ 1459.014195][ T2831] usb 5-1: Using ep0 maxpacket: 16 [ 1459.125587][T28657] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1459.134286][T28657] usb 4-1: config 0 has no interface number 0 [ 1459.140526][T28657] usb 4-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=19.42 [ 1459.149867][T28657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.153956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1459.164323][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1459.183346][ T2831] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 1459.191629][ T2831] usb 5-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 1459.202095][ T2831] usb 5-1: config 0 has no interface number 0 [ 1459.208374][ T2831] usb 5-1: too many endpoints for config 0 interface 169 altsetting 182: 148, using maximum allowed: 30 [ 1459.219738][ T2831] usb 5-1: config 0 interface 169 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 1459.233306][ T2831] usb 5-1: config 0 interface 169 has no altsetting 0 [ 1459.240252][ T2831] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=94.1b [ 1459.245296][T28657] usb 4-1: config 0 descriptor?? [ 1459.249481][ T2831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.324948][ T2831] usb 5-1: config 0 descriptor?? [ 1459.389966][T28657] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware [ 1459.401788][T28657] usb 4-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 1459.411531][T28657] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1459.427294][T28657] dvb_usb_dibusb_mb: probe of 4-1:0.69 failed with error -22 [ 1459.497524][ T7434] usb 4-1: USB disconnect, device number 92 [ 1459.613641][ T2831] usb 5-1: string descriptor 0 read error: -71 [ 1459.620559][ T2831] port100 5-1:0.169: NFC: Could not find bulk-in or bulk-out endpoint [ 1459.638512][ T2831] usb 5-1: USB disconnect, device number 20 [ 1460.273454][ T2831] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1460.333418][ T7434] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1460.513397][ T2831] usb 4-1: Using ep0 maxpacket: 8 [ 1460.573459][ T7434] usb 5-1: Using ep0 maxpacket: 16 [ 1460.633524][ T2831] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1460.641834][ T2831] usb 4-1: config 0 has no interface number 0 [ 1460.648253][ T2831] usb 4-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=19.42 [ 1460.657580][ T2831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.667339][ T2831] usb 4-1: config 0 descriptor?? [ 1460.703640][ T7434] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 1460.711985][ T7434] usb 5-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 1460.722563][ T7434] usb 5-1: config 0 has no interface number 0 [ 1460.728794][ T7434] usb 5-1: too many endpoints for config 0 interface 169 altsetting 182: 148, using maximum allowed: 30 [ 1460.740129][ T7434] usb 5-1: config 0 interface 169 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 1460.753744][ T7434] usb 5-1: config 0 interface 169 has no altsetting 0 [ 1460.760588][ T7434] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=94.1b [ 1460.769870][ T7434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.782555][ T2831] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware [ 1460.794245][ T2831] usb 4-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 1460.803930][ T2831] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1460.819669][ T2831] dvb_usb_dibusb_mb: probe of 4-1:0.69 failed with error -22 [ 1460.830280][ T7434] usb 5-1: config 0 descriptor?? [ 1460.905828][T28657] usb 4-1: USB disconnect, device number 93 [ 1461.113787][ T7434] usb 5-1: string descriptor 0 read error: -71 [ 1461.120858][ T7434] port100 5-1:0.169: NFC: Could not find bulk-in or bulk-out endpoint [ 1461.136074][ T7434] usb 5-1: USB disconnect, device number 21 19:50:53 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001900d927e65de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) 19:50:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) 19:50:53 executing program 0: mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000003000/0x2000)=nil, 0x3) 19:50:53 executing program 5: symlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) 19:50:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@polexpire={0xcc, 0x1b, 0x221, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote}}}, [@policy_type={0xc}]}, 0xcc}, 0x8}, 0x0) 19:50:53 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002440)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x4e20, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 19:50:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@polexpire={0xcc, 0x1b, 0x221, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote}}}, [@policy_type={0xc}]}, 0xcc}, 0x8}, 0x0) [ 1461.576349][ T7527] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 19:50:53 executing program 5: mprotect(&(0x7f00004d9000/0x3000)=nil, 0x0, 0x0) 19:50:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) 19:50:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x300}, 0x0) 19:50:53 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000000), 0x6) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r7) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r8, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 19:50:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f00000004c0)) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0xb00) 19:50:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@polexpire={0xcc, 0x1b, 0x221, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote}}}, [@policy_type={0xc}]}, 0xcc}, 0x8}, 0x0) 19:50:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1b}, @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x58}}, 0x0) 19:50:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x159, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2006, 0x118, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x0, "59d63582"}, @global=@item_012={0x1, 0x1, 0x0, "a9"}]}}, 0x0}, 0x0) [ 1461.956702][ T7539] IPVS: ftp: loaded support on port[0] = 21 19:50:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) 19:50:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") close(r0) [ 1462.227160][ T7561] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 1462.235565][ T7561] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 1462.243975][ T7561] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 1462.255847][ T7561] IPv6: sit1: Disabled Multicast RS 19:50:54 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000100)) socket$l2tp(0x18, 0x1, 0x1) [ 1462.343903][ T7568] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 1462.352614][ T7568] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 1462.361441][ T7568] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 1462.373339][ T7434] usb 6-1: new high-speed USB device number 99 using dummy_hcd 19:50:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:50:54 executing program 1: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 19:50:54 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000b40)={0x4}) 19:50:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_FILTERING={0x8, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1462.633609][ T7434] usb 6-1: Using ep0 maxpacket: 8 [ 1462.664369][ T7588] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 1462.764647][ T7434] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.775739][ T7434] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1462.788776][ T7434] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 1462.798000][ T7434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:50:54 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000000), 0x6) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r7) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r8, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 19:50:54 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4788}]}]}, 0x24}}, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) 19:50:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b000000200a00000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e0000001000000ba00000000"], 0x80}}, 0x0) 19:50:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000005f80)={0xade9, 0x21, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) [ 1462.956349][ T7434] usb 6-1: config 0 descriptor?? [ 1463.254694][ T7702] IPVS: ftp: loaded support on port[0] = 21 [ 1463.469205][ T7434] hkems 0003:2006:0118.0065: item fetching failed at offset -890736322 [ 1463.478156][ T7434] hkems 0003:2006:0118.0065: parse failed [ 1463.484261][ T7434] hkems: probe of 0003:2006:0118.0065 failed with error -22 [ 1463.626383][T28657] usb 6-1: USB disconnect, device number 99 [ 1464.403465][T28657] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1464.583749][ C1] net_ratelimit: 28 callbacks suppressed [ 1464.583772][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1464.595729][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1464.643359][T28657] usb 6-1: Using ep0 maxpacket: 8 [ 1464.663760][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1464.669821][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1464.676201][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1464.682224][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1464.688681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1464.694968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1464.793546][T28657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.804726][T28657] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1464.817805][T28657] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 1464.827029][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.836780][T28657] usb 6-1: config 0 descriptor?? 19:50:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, 0x0) 19:50:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000280)) 19:50:57 executing program 2: epoll_wait(0xffffffffffffffff, 0xfffffffffffffffd, 0x191, 0x0) 19:50:57 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4788}]}]}, 0x24}}, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) 19:50:57 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000000), 0x6) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r7) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r8, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) [ 1465.136279][T28657] hkems 0003:2006:0118.0066: item fetching failed at offset -1126645682 [ 1465.145339][T28657] hkems 0003:2006:0118.0066: parse failed [ 1465.151265][T28657] hkems: probe of 0003:2006:0118.0066 failed with error -22 [ 1465.169321][ T7434] usb 6-1: USB disconnect, device number 100 [ 1465.217414][ T7716] openvswitch: netlink: Missing key (keys=40, expected=200000) 19:50:57 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4788}]}]}, 0x24}}, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) [ 1465.383943][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:50:57 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7f) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00\x00\x80\x00\x00\x80\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) 19:50:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000650400"/20, @ANYRES32=r2, @ANYBLOB="00000400000000005c001200140001006272696467655f736c61766500000000440005000800010001000000080003000000000008001c000000000008001e000000000008001e0003000000080008000100000008001d00010000000800070000000000"], 0x7c}}, 0x0) [ 1465.443110][ T7722] IPVS: ftp: loaded support on port[0] = 21 19:50:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1465.546797][ T7755] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1465.555111][ T7755] netlink: 'syz-executor.4': attribute type 28 has an invalid length. [ 1465.564026][ T7755] netlink: 'syz-executor.4': attribute type 30 has an invalid length. 19:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000070a07131dfffd946fa2830020200a0009000210001d85680c1baba20400ff7e28000000110affffba00008546c8243929db2406b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) 19:50:57 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4788}]}]}, 0x24}}, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) [ 1465.827588][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1465.863664][ T7434] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1465.939726][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:50:58 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x4, 0x0, "0cce57ed40a4f616c8e599b9261bc83a2e89e8e225431ffd4b350528ab121b48"}) 19:50:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000650400"/20, @ANYRES32=r2, @ANYBLOB="00000400000000005c001200140001006272696467655f736c61766500000000440005000800010001000000080003000000000008001c000000000008001e000000000008001e0003000000080008000100000008001d00010000000800070000000000"], 0x7c}}, 0x0) 19:50:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x146, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x110, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}}, 0x0) 19:50:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07002b0000000000ff0701000000450001070000001419001a00120002000e00010009000300000000000001000000", 0x39}], 0x1) 19:50:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000650400"/20, @ANYRES32=r2, @ANYBLOB="00000400000000005c001200140001006272696467655f736c61766500000000440005000800010001000000080003000000000008001c000000000008001e000000000008001e0003000000080008000100000008001d00010000000800070000000000"], 0x7c}}, 0x0) [ 1466.169994][ T7434] usb 3-1: Using ep0 maxpacket: 32 [ 1466.305189][ T7434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.316353][ T7434] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1466.329419][ T7434] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1466.338673][ T7434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.369574][ T7434] usb 3-1: config 0 descriptor?? 19:50:58 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000000), 0x6) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x49b, r7) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSETATTR(r8, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 19:50:58 executing program 1: r0 = socket$inet6(0xa, 0x80805, 0x0) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="8a5eff487343a5b580df2dc7c18cd3b2"}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="18", 0x33c00}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8f", 0x1}], 0x1}}], 0x2, 0x0) 19:50:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "51bd6247e9de77312051174ae4736b288d7bcbf8b2198440e2944850054c6fc7c4fc94bb8eaf1068d65036397d0bf1cd00c1ad175e3210004d06d5539901d84c29136aed0e238ca0757aa414ef989c43"}, 0xd8) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x1ec}, @fastopen={0x22, 0x9, "cd076e641f6dc1"}, @generic={0x0, 0x2}]}}}}}}}}, 0x0) 19:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x17b}]}) [ 1466.729557][ T7883] IPVS: ftp: loaded support on port[0] = 21 [ 1466.944702][ T7434] uclogic 0003:5543:0005.0067: unknown main item tag 0x0 [ 1466.964165][ T7434] uclogic 0003:5543:0005.0067: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 1467.078548][T28657] usb 3-1: USB disconnect, device number 112 [ 1467.853355][T28657] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1468.093353][T28657] usb 3-1: Using ep0 maxpacket: 32 [ 1468.213565][T28657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.224841][T28657] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1468.237890][T28657] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1468.247121][T28657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.256966][T28657] usb 3-1: config 0 descriptor?? [ 1468.564496][T28657] uclogic 0003:5543:0005.0068: unknown main item tag 0x0 [ 1468.578950][T28657] uclogic 0003:5543:0005.0068: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 19:51:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1a000000140081ff00002c000500cf182897f09730af00050000", 0x1a}], 0x1}, 0x0) 19:51:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000650400"/20, @ANYRES32=r2, @ANYBLOB="00000400000000005c001200140001006272696467655f736c61766500000000440005000800010001000000080003000000000008001c000000000008001e000000000008001e0003000000080008000100000008001d00010000000800070000000000"], 0x7c}}, 0x0) 19:51:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x72, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) 19:51:00 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @win={{}, 0x0, 0x4, &(0x7f00000000c0)={{0x0, 0x3}}, 0x7f, 0x0}}) 19:51:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x21, 0xa, 0x0, "176001fafffff700000000000000000000010000000000004000"}) 19:51:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x17b}]}) [ 1468.646191][T28657] usb 3-1: USB disconnect, device number 113 [ 1468.737664][ T7904] validate_nla: 18 callbacks suppressed [ 1468.737689][ T7904] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1468.753471][ T7904] netlink: 'syz-executor.4': attribute type 28 has an invalid length. [ 1468.761685][ T7904] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 1468.770031][ T7904] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 1468.778377][ T7904] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 1468.786674][ T7904] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1468.795014][ T7904] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 19:51:00 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xa2) 19:51:00 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x80002003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 19:51:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x17b}]}) 19:51:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 19:51:01 executing program 2: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x80ffff, 0x2e, 0x2e, 0x80ffff, 0x5f, 0x5f, 0x3c46]}, 0x3c) 19:51:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x25, 0x81000000}, @IFLA_LINKINFO={0x14, 0x12, @bridge={{0x10, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 19:51:01 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) close(r0) 19:51:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000400030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 19:51:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") write(r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 19:51:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x17b}]}) 19:51:01 executing program 4: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x49, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x3, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 19:51:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:51:01 executing program 0: unshare(0x20600) r0 = socket(0x100000800000011, 0xa, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendfile(r0, r1, &(0x7f0000000040)=0x200000020004, 0x0) 19:51:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000400030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 19:51:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r2, r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, 0x0, 0xc3) [ 1469.835684][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.843542][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 19:51:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x4) 19:51:01 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @raw_data="65959c3418b0a8484e5636314f9e395ffe7eadc4e5efe4eb08b2818231f0b171d01a6ccab9aa61f9334780ee00617fd51776eba2ff6638152706d334b8c317bd72cb367b00b738a668c1f265769a8b83bdfba7f2a6a533f765362117325765424a42ff769cc614819d4ffe8bb06797edd61780727c8acae9d1114979bc5a6df889dd78b39d1456720c394c7d690a6659812de9ef718772c8b725bccea7fa69346c281c827ab34639f139b818aeb4219bb23f6072e27fa590731d28c92807ba70d895fb32d01fb64a"}) 19:51:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000400030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 19:51:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:51:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000001400000800120002000200000000000000000020006c0003030000000000000000000000000000000000000000000000000b01100014bb000000000000000000800000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 19:51:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000400030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 19:51:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x0, 0x10012, r3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000/0x2000)=nil}) [ 1470.379187][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1470.387047][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 19:51:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 19:51:02 executing program 1: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8048ae66, 0x0) 19:51:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000001400000800120002000200000000000000000020006c0003030000000000000000000000000000000000000000000000000b01100014bb000000000000000000800000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 19:51:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:51:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 1470.814260][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1470.821899][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1470.823892][ C1] net_ratelimit: 31 callbacks suppressed [ 1470.823912][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.841473][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:02 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 19:51:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000001400000800120002000200000000000000000020006c0003030000000000000000000000000000000000000000000000000b01100014bb000000000000000000800000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) [ 1470.903874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.910148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1470.916704][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.922963][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1470.929474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.935816][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f05000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 19:51:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x40000002, 0x0, 0x4000000000], [0xc1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:03 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @decrefs={0x630c}], 0x0, 0x0, 0x0}) 19:51:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000001400000800120002000200000000000000000020006c0003030000000000000000000000000000000000000000000000000b01100014bb000000000000000000800000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 19:51:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:51:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) [ 1471.303881][ T8235] debugfs: File '8234' in directory 'proc' already present! [ 1471.350790][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1471.358645][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 19:51:03 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 1471.399687][ T8240] binder: 8234:8240 unknown command 0 [ 1471.408688][ T8240] binder: 8234:8240 ioctl c0306201 200002c0 returned -22 19:51:03 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x9f, 0xb3, 0x31, 0x8, 0x3f0, 0x581d, 0xbec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x2, 0xff, 0x1, 0x7, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a}}]}}]}}]}}, 0x0) 19:51:03 executing program 1: capget(&(0x7f0000008ffb)={0x20080522}, &(0x7f0000009000)={0x4}) [ 1471.623772][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1471.630092][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:51:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, 0x0) 19:51:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') sendfile(r1, r2, 0x0, 0x80000001) 19:51:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1471.813394][ T2831] usb 3-1: new high-speed USB device number 114 using dummy_hcd 19:51:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0xb9b, 0x0, 0x1, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1472.063645][ T2831] usb 3-1: Using ep0 maxpacket: 8 19:51:04 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) readv(r0, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/85, 0x55}], 0x1) 19:51:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xaa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000240)=""/195}, 0x23) 19:51:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x18, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x9, 0x0, &(0x7f0000000100)) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) [ 1472.099451][ T8469] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:51:04 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0x72, 0x1f, 0x10, 0x460, 0x4, 0x6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x1, 0xfe, 0x79, 0xc5, 0x0, [], [{{0x9, 0x5, 0x7, 0xf}}]}}]}}]}}, 0x0) [ 1472.205637][ T2831] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 1472.214039][ T2831] usb 3-1: config 0 has no interface number 0 [ 1472.220251][ T2831] usb 3-1: config 0 interface 47 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1472.230410][ T2831] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice= b.ec [ 1472.239640][ T2831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffe98, &(0x7f0000000540)=[{&(0x7f0000000040)="2f0000001d0003fd6d000036000000000cde0700020000001f5f08c908000100020073730beeffff005867852acba5", 0x2f}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:51:04 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000b8fc8ef1576bb9daf8"], 0x10}}], 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 1472.358053][ T2831] usb 3-1: config 0 descriptor?? [ 1472.407970][ T2831] qmi_wwan: probe of 3-1:0.47 failed with error -22 [ 1472.513523][T28611] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1472.608684][T28657] usb 3-1: USB disconnect, device number 114 [ 1472.753361][T28611] usb 1-1: Using ep0 maxpacket: 16 [ 1472.873638][T28611] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 1472.881953][T28611] usb 1-1: config 0 has no interface number 0 [ 1472.888331][T28611] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1472.899354][T28611] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice= 0.6a [ 1472.909607][T28611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.919266][T28611] usb 1-1: config 0 descriptor?? [ 1473.166922][T28611] usb 1-1: USB disconnect, device number 120 [ 1473.393616][ T2831] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1473.633344][ T2831] usb 3-1: Using ep0 maxpacket: 8 [ 1473.753571][ T2831] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 1473.761933][ T2831] usb 3-1: config 0 has no interface number 0 [ 1473.768295][ T2831] usb 3-1: config 0 interface 47 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1473.778187][ T2831] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice= b.ec [ 1473.787432][ T2831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.796833][ T2831] usb 3-1: config 0 descriptor?? [ 1473.835922][ T2831] qmi_wwan: probe of 3-1:0.47 failed with error -22 [ 1473.933350][T28611] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1474.035397][ T2831] usb 3-1: USB disconnect, device number 115 [ 1474.173275][T28611] usb 1-1: Using ep0 maxpacket: 16 [ 1474.293488][T28611] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 1474.301642][T28611] usb 1-1: config 0 has no interface number 0 [ 1474.308017][T28611] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1474.319065][T28611] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice= 0.6a [ 1474.328390][T28611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.337760][T28611] usb 1-1: config 0 descriptor?? 19:51:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1070}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 19:51:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 19:51:06 executing program 1: r0 = socket(0x1e, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 19:51:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000080)={@rand_addr="d80ef91d08066dd7a8708d2c0835e8b7"}, 0x20) 19:51:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l-generic\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x184}}, 0x0) [ 1474.575623][ T2831] usb 1-1: USB disconnect, device number 121 19:51:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x9, @vbi={0x800}}) [ 1474.638628][ T8611] input: syz0 as /devices/virtual/input/input206 19:51:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000002400)) 19:51:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, 0x0, 0x0) [ 1474.777635][ T8619] input: syz0 as /devices/virtual/input/input207 19:51:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r3, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1}, 0x12d48122) 19:51:07 executing program 0: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "e20b687e3f2097fe5933f3646e652f5db02a9e082d4706d1cdea18bc59cd8fefcd61ff8522bf4107ab4edd1d715e0b30bc7e024e597245e784fd70d9108a0c983aa845a05f362b490ce5564245ec921b8a4cdf2d928c45728cead38fd2bd27049c5796839732c6e843a5ed792328752605aa83c9311821b1f82c2e54e7622910e4d8be86154d544d42892d7e1bea3d671b814fda91fb6e2236cf4a3fb2a5fa7d2b721aa94618f58f17da101be17c9739265ec46dfe4a09aa23b60b4797d1d79527f2bb83ed4527b756c2fd31a1c1e44701a451d8167a208f79e843fba9d5fb9d715617070635c1fa0a194e401aba26075d8a4675ff2adde9f92878d9130b97b8a31c0c8a812c042622a98274d61ffc3442904a26f002eb3a8e000a6fc4cbabecf7cb505dd948d0f01800f611a5ef2bee3c007987484562ea96e137fa0af9d520904388d54ec22c337186a815814665ebf4a61708d648fbda47997df0affcd022a0ace561a6465410386c31e71d5138e682f7489e5e2b8ffd2821f60784cfef85fcb8e0f1b6be75b1367ddab1e7039f7f92430d2c5b15c28187b854ad27e2262cd4b56be5bb50fa8e248c60e74a20357a0e0cfdb1e92d79a86d21fe469a8a1ca0d4b25382a54b3dd6d42d61dd8b69f217e46c73c36965a8285a4945176dc9579de3a8b4e5a74861bcc70159ef75c5de6264aaa0fdd23001aca5b99ed37c6c3e8ca70bb64c2f96e759a945805a8be53ddfcc37521b3def65fe7ae2775127a38af910e6da3a130ef11a5fb8c8e6a9f6c0ce98297624e6140ba78859623e693654f9624c5483d5ce676ff5b4d039e387f3a5d73a04ca6fe30e52836ed91c526b6f47f75d2457286d47550d3bfeec56de59814d3eb413a8ad1721fa51298ab4ad400547827d6a5e9f323b4b053f67659000ac04fe063964fba5f9aea656eb3cf49bd927d8e36c62865ecf66ddfa999abafeb078b3e2fd7100c28779f71c32a47224d1d1a48f95e3af16bc4e5a9a216e10b1224b587c849bc6fd350303824840b47ad6f0a3f28810beb2ebb187c76101ab31731e338246e1156b988c11400c94704209d57e53e615c7bf1887b5d47f5014a665eb6b79b59639400a0fb48d182b627a64d288ba406165a6bbc0781419120beb8c9e62bff1b4349e6b03a2b472bba4943125b0307c59a70e15c0d79a7cf9903eb183a8c154aeb2b761986e8ee3447b4097c1e4c586f7730931fc05e3af3b4ea0b1d84184145a13a8d55618abc2b701cb504c9d9c8d5b789d3021f162ce7adf9c7d05c00ac5afc08ac91c82ff49613bb091ef8cd454fc912e168057bbd831a1df90803fe0bab55e61a568e3cea9966adc9f5c5e148944c511fbf3aade3a84dc58a7c91943eec073ac3edd44621ef15e96adda2b4a3243107733b3ddb46a4be0330d19fdcf4e9ed33f39a30535ef4328d7052989183d97dca48f24ecf88a2ccaea5015d22f3c148f702d3a85fc6f0a6cb57b173eee1e01d4101538719218811e7a5fd1464b24a50a8d0105068f82e36aa8ce345347663a15f0656c5d9129379a07f8dcc5ad03ac5a54b4cf5fab17e9381ce5bd3af5f1eb960b60a618c819c9825a0cce13ff03755c72841374560a53c648b098b37b98234b2e088e1efe54b878d0637ac2c182a16620268a8430cc04ced8fec95a44df9417307f7eedbce3d154e087ccf45743370be4b18559730e43a0e8d6eea4970828fdb46fe166cf2488efec29dd1171bd365ce70c4c1c3493e7c5e2a0294784a28df2aef8431dacc8aff10b9aace065af2de80a26d909c8f15ee6ba5be5fd6a32d5fca2a5179e9fd0a942d850b90c878a3e59631d87401e9dfc509cbbf5a56713eb2b4bbf87d4a76b7fbc8e00d393c38ae4fe091318bbb9d3ccfcf46a02c4cf5be258f53f89cc67912d15ddc702b79a297ba5ad7d76ad6926997aa3dc762fabc2ca6c73db6aa3defb2b8f9d075136f08b2b2ca11b153330f47c44e62d95895460681c1833fc288d68163e52e71257a42fccc2b732aa4291b9f84ca9f513ab3f1b2ab07ce1fe25002a5c437f5ca78baff3924c78c8ed0cd0015e12eba16b917b4fb7413ce0b66809ae5de452c11772b9f11cd0d30a878c298726534039c77a9fcd36d48c09fdafebaf728342e861330d346317bccb7b43670d035f82fb27803562415cff8a7d95e1fa923d763a9bc5b7209136a20b89e648353b86e135aece95cc4f4f5457c7667aa27955f765d539932886986a2904eaf399c91569692c1ec5069a5c32bdf1cd2505b300090e68d1126d2f22929945bebcabb9051b07511af531051f35d2696f3795f083cbb9afa66bc0513b99ad616613e967e10ab5463f54f15f3b41d98da84cb212f6a3b873e0adf96af61d1d398baa71d3bf0c873a5abdde45bd2724903c6bc854004585bbc1aeeb757f644b40a93cea6279293c979c7c9a899ead1fe1b5259983b81fb9b56b94f0ac29c550540d735c75a695ea74930bdd3d4bd9612985e0e2fff6b7bafc88fc413456fb178d2e7cef7d4b820c42a613a14c93973ab837263862e4e74eef7ec46d6d250d85e4f1a3259b7b1464df32cedf1e45a58472590bd02527afbf47208bcc28365ba174fcf962685cf521ad5adb211b3590ae46b0b2a38ad4b0164992cdf3efa5830bc6b9be83ec6d5cee0bd304e76ad1c7a937e58e66ed9255d513d8a4338a693dbc12880c34e68d3fc05f16ba57eb9dfa218209d192a5f6e1de4809c939ef694e5995467b19ae0660a57c433c90516036a6eaa11cd886b0860e3ed4833983f33a9ed1f9630542f7dcbcb567837858e85bcfef1ea46879ff817a738728a7c62bbac35312aaa1dd6ae6b44209ccfd0cc45cc178e276899ac78da84218c3d79ff47d83a4ba3fd92fa9eccb653ba327f2b137f93c8d58d933fda82997f199a6edc45c84468938844b4d8653e06ace7baeaa06c4ededa0010aed3c2cd79924eab0f14f2d109be0312465617739e7eec1a0b44059515fab6ce6aa445755ba8e3f39d7010cf1adbeb6020dcfd7967ff40e4fee2f01a1a8b451c162a8f7b4c3f3951e0ddc51907f1bc9eccec804a3a9a5f483dfc004238d2b858addf215faf33f40f055c7fe0c76a29ba80e5f0efc0e0f649621263f26ba4c2e19b715c9778eb06bb2e3f97b65a64cd5dda2b8d72933058959b9c5a30d098f53890db18b622127d5b3f195bc3602070b4984b4c7bac77888e30805476b9fc4bc9780225a95f00337f329e2964c23534949a74fc703fff70895c7190dc0108293d9742fa78c132719a656fd77a27977ba525c3a3fc6148c23449be43d3a6b23bb3d6a073bbe745b7aa474fa5bd1614a15a79fd8b1bfe3766135895379b2f07de027dc1f5dff352822189ccccd87cd4f29b768b687fd685bdad2d011ba4317e6209ae95cbf565bec62345d7413f244ce4fccd6c7872a82a211dac4914faa9b5040f19c8e0f252f76cd2bde8134011cf093e27fff9f6fd6155a7681030eaebe192d705925a9a0ca02fe09192dedf9e53e389c76a6209c7b761b3d798d3061f40d3a683377cbb0ce6790f29676d82b193d76e1c9ce10a21d791273ae1318c60895ac022b63fdd0840168f132619a8ee6b972c3f8269e9dd18055972ad0cd3769fbdafacfb68d9c87397bfbcf66ea072315c58bb630e40e108c7f010126ec9646e2f1bad3d7adc6eebc524efe5e384fe50d0125231f4a458a72673f0136733d48ebe4dd34481ac982ba1656b30df833f2caac8a13a78598a35d1ad34f95095be0a7822660924e78970f499f2e5557437b9b316d213c3c2a24d69b0c3a2261019245d83d09029f204e6c52032af1a1ea8bcc75a65213c7f713f116826b38d293ad88d73d26d75459fe154e31788df4bb6d751b3a4031bb2895d851ed391ace96ad36009a456d5ae38f1195281acb1eb07cbef90930371a7555c3ea70b39b9965569fc754d3dec904e15d69683bac1f8e69a33ebb623a5f0cdfe8978918728854da15d22ad8c19d2d4d3d323991a63574843fd97cb2a7dfc1a2109334c07373f397779fd33c41930636e6407097be5cef9e522c766f9a91753e769f5b5346c9d813a1a582477db43a48c26591219783969191348c2cfc4b1ac08b50dd6fc1cd08b686a321babb3398c0bc0371d0c73782d39bf9df609f586205bb53e4846c90c36737d99c755cfbb1869f7b100795f3c34ba7ed7815bac28297afa2dc56a3a492676bf351c6b013fd1f3509b24e39c0a0e2d6403ff4add4bdb5d9e71f4332d10ca28d10059600871715f70daf614c0c1364fc02d662cc98dc86a1eb5aba6975b901bdaf9597405c49eb22efc8f2e79db556e9814753734e9f193cd4eb6b495bdea7961498e00bdb290edef2b1b7066b6d9312b249d0f95e19a4697aacc7c2072981bea70cf47e57ae28330329aa989f8d310d5868a14de4b07f4859ee84af8464854b5458d96d6b1576a768d1bceed4b09186649ea8e61a85bb9e5a9061efceec926c8b0342b998d2543b871f435ac8f11e7c115a519ec944243fbe0497bd5e7e64c555cdb60e66461e58095242bcbb75d0685cfcbbbfa28623edde7c467ad33cae2f8421c13084443dad0655e94fd7975d14f607f84b49b75a3a0959485794a04765fda0d242266cccff7816759a764da8d4fa3142d32aacedb10347d1c34d9f593d390cd902ede649d9a4164c5c530085766402a95e376f3b02a45a01c57b4a3e2d27a81ea7cd4cb4686d4c786005c853c3d154c99c34700260cb2ccb869d19a393adf7b72added2a39919577e57284e77ac8d8430ef3ad7112a4b6c543fef52cf9622c466b51c50ee8b0949aa33eed08c407b69238794afe0d3081434542aec664b03d60461368c2eed7eb369763532b6be93dab227a3be3e7704893b74e6069bd4f4e9be5a4ff2a64b056c3f4adfcd0913bc5684783a5bdbeb35d990c95cf1776eaa47a6ffaeb48897f0013c91065cde2bbb01d0c4a45d08d8b7516b7578e1d0135b0c22ce409745dacd92180da673b41445e402aa52b2720e3fd82065edd848171708e3e84b04c68c10bddc586984646b64fc69b848496ebb5fbbaf1efbb6c79c72bb2bc5c57a544b5f393c1655e217f6d1c56f36583259c87b07f4a6ca75564c9685551b349670f0f2c78d8990215a66a0fc44f07638f16944cffed9e734297105f18a058dfcf60db969e62f955dfae41b5a0950a6b01e3d41cdef681e6841c5ce8c26d628829f1bee888afb3d6c078ad8136be5fb7d13d9b9ead3dc0e411d377ddbc02d0a26fe7101ae032447f6ec225f19b80962448845334054858324825e91433d35dfa4c2690704b6dbc26557c14938a95f5b689a219e0efe2b6a3d158e6fe6ab6df9e8157adcfd0dfa9750a2e5b874f8c700948326244967ffe3f2c910ffa6ca671c484317326ba3e7c2f45e17d2c2f30c4a89e2ae40785b10134c8cb68777f4be0c2329d409f4a92884cd06381bf76fb73b692ae9dfd4b2861adc31e203f5e7c5f31829eb3fd4bf597147c50950c3b80fea1fa6b57e0f0c677f23f4fb24311b136503c332ce0a853ed24e9a699babe501093e174bbdc5b1aad37820756605d6ee1bfd36f304d7ce3bfd5a955712585f6de65e8f41d8a6e25c8566a6d7064ac14ac8af163d313831fc2a85fdaabbbecb0b042b5139ed55edf287179d0ee6c5ced46a40df919edd8443560f74fdc7b4dad1e5c077da7d4b58e1b828a06ba74d99efeb8a4608e4f785235e20eba969120e5f2c386f19f40861e3f12335a7df76cf48c9b6ef9882538447ccfd067577742f04b", "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"}) 19:51:07 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x25, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) 19:51:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) clone(0x2102801ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x9903000000000000, &(0x7f0000000040)={0x40000000000003, 0x4, 0x4, 0x8000000000008, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 19:51:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r3, 0x0) ioctl$BLKIOOPT(r3, 0x1279, 0x0) 19:51:07 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [{}]}]}}, @icmp=@timestamp}}}}, 0x0) 19:51:07 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000000)) 19:51:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bbf}, {{@in6=@dev}, 0x0, @in=@local}}, 0xe8) 19:51:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') read$rfkill(r0, 0x0, 0x0) 19:51:07 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x65, 0x5, 0x0, &(0x7f0000000080)) 19:51:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='G', 0x1, 0x85b1828972a66d70, &(0x7f0000001000)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 19:51:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:51:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f6105000af80200fe0200000001080008001e000a00ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 19:51:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x88, &(0x7f0000000e40), 0x2}], 0x8d9, 0xff03) 19:51:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)='W', 0x1}]) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001500)) [ 1475.786732][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1475.798215][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1475.811141][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1475.824686][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 19:51:07 executing program 2: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) waitid(0x1, r0, 0x0, 0x4, 0x0) 19:51:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x17, &(0x7f0000000180)={&(0x7f0000000040)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@empty}, {@in=@multicast1, 0x2, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1476.040807][ T8675] device bridge1 left promiscuous mode [ 1476.061275][ T8675] device veth13 left promiscuous mode [ 1476.078476][ T8675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1476.099483][ T8675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1476.171499][ T8675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1476.192680][ T8675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1476.432468][ T8796] mip6: mip6_destopt_init_state: spi is not 0: 33554432 19:51:08 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) [ 1476.490673][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.498654][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1476.506636][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1476.515612][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1476.524622][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1476.533610][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1476.542480][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1476.551395][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1476.560408][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1476.569464][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1476.578461][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1476.587495][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1476.596487][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1476.605535][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1476.614593][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1476.623693][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1476.632830][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready 19:51:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(0x0, 0x0, 0x200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1476.641940][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1476.651057][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1476.660108][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1476.669167][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 1476.678280][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1476.687423][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 1476.696512][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1476.705593][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth25: link becomes ready [ 1476.714755][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth24: link becomes ready [ 1476.723879][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth27: link becomes ready [ 1476.732982][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth26: link becomes ready [ 1476.742063][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth29: link becomes ready [ 1476.751151][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth28: link becomes ready [ 1476.760258][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth31: link becomes ready [ 1476.769458][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth30: link becomes ready [ 1476.778718][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth33: link becomes ready 19:51:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1476.787898][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth32: link becomes ready [ 1476.797041][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth35: link becomes ready [ 1476.806236][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth34: link becomes ready [ 1476.815462][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth37: link becomes ready [ 1476.824638][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth36: link becomes ready [ 1476.833850][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth39: link becomes ready [ 1476.842977][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth38: link becomes ready [ 1476.852222][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth41: link becomes ready [ 1476.861447][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth40: link becomes ready [ 1476.870701][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth43: link becomes ready [ 1476.879947][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth42: link becomes ready [ 1476.889170][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth45: link becomes ready [ 1476.898359][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth44: link becomes ready [ 1476.907630][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth47: link becomes ready [ 1476.916920][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth46: link becomes ready [ 1476.926256][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth49: link becomes ready [ 1476.935503][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth48: link becomes ready [ 1476.944765][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth51: link becomes ready [ 1476.954025][T28611] IPv6: ADDRCONF(NETDEV_CHANGE): veth50: link becomes ready [ 1476.982823][ T8843] ptrace attach of "/root/syz-executor.2"[8858] was attempted by "/root/syz-executor.2"[8843] 19:51:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x40}}, 0x0) [ 1477.067339][ C1] net_ratelimit: 26 callbacks suppressed [ 1477.067362][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.079627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.100874][T28611] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1477.109000][T28611] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1477.123739][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1477.140465][T28611] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1477.149324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.155772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.162308][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:51:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)='W', 0x1}]) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001500)) [ 1477.168679][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.175367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.181651][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.188907][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1477.200575][T28611] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1477.217210][T28611] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1477.226805][T28611] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1477.243562][ T7434] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1477.243726][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! 19:51:09 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x689}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x2, @dev}, @icmp=@parameter_prob={0x4, 0x6, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) [ 1477.290755][ T8914] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 19:51:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0xc003, @multicast2}]}}}]}, 0x38}}, 0x0) [ 1477.373751][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1477.385595][T28611] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1477.393639][T28611] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1477.410754][T28611] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.419038][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1477.427750][T28611] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.439287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.473861][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1477.553739][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.575106][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1477.584276][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 19:51:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, 0x0) [ 1477.607012][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1477.616095][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1477.623968][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1477.644119][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1477.684257][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! 19:51:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)='W', 0x1}]) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001500)) [ 1477.883713][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.899457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.905671][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.916205][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1477.924329][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1477.932393][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.941719][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1477.949846][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! 19:51:10 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES64=r5, @ANYRESDEC], 0x20) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1478.101840][ T7434] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1478.110223][ T7434] usb 2-1: config 0 has no interface number 0 [ 1478.116562][ T7434] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 1478.125801][ T7434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3b}]}) 19:51:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1478.183767][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1478.208821][ T7434] usb 2-1: config 0 descriptor?? [ 1478.267137][ T7434] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 1478.276601][ T7434] em28xx 2-1:0.219: Video interface 219 found: [ 1478.283698][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1478.333808][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1478.393985][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1478.443879][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1478.457833][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1478.467175][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1478.491775][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1478.500953][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1478.596378][ T7434] em28xx 2-1:0.219: unknown em28xx chip ID (0) [ 1478.734223][ T7434] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 1478.742608][ T7434] em28xx 2-1:0.219: board has no eeprom [ 1478.803956][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1478.812050][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1478.820722][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1478.828891][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1478.837063][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1478.857208][ T7434] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 1478.865185][ T7434] em28xx 2-1:0.219: analog set to bulk mode. [ 1478.871992][ T2831] em28xx 2-1:0.219: Registering V4L2 extension [ 1478.873610][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1478.923612][ T7434] usb 2-1: USB disconnect, device number 81 [ 1478.940845][ T2831] em28xx 2-1:0.219: reading from i2c device at 0x4a failed (error=-19) [ 1478.949493][ T2831] em28xx 2-1:0.219: reading from i2c device at 0x48 failed (error=-19) [ 1478.958151][ T2831] em28xx 2-1:0.219: reading from i2c device at 0x42 failed (error=-19) [ 1478.966673][ T2831] em28xx 2-1:0.219: reading from i2c device at 0x40 failed (error=-19) [ 1478.975222][ T2831] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 1478.982388][ T2831] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 1478.989750][ T2831] em28xx 2-1:0.219: No AC97 audio processor [ 1478.999410][ T7434] em28xx 2-1:0.219: Disconnecting em28xx [ 1479.007386][ T2831] usb 2-1: Decoder not found [ 1479.012040][ T2831] em28xx 2-1:0.219: failed to create media graph [ 1479.018883][ T2831] em28xx 2-1:0.219: V4L2 device video43 deregistered [ 1479.030121][ T2831] em28xx 2-1:0.219: Remote control support is not available for this card. [ 1479.039033][ T7434] em28xx 2-1:0.219: Closing input extension [ 1479.059219][ T7434] em28xx 2-1:0.219: Freeing device [ 1479.073790][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1479.283901][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1479.443343][ T7434] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1479.703638][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1479.711543][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1479.813521][ T7434] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1479.821768][ T7434] usb 2-1: config 0 has no interface number 0 [ 1479.828145][ T7434] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 1479.837347][ T7434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.847008][ T7434] usb 2-1: config 0 descriptor?? [ 1479.898562][ T7434] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 1479.908066][ T7434] em28xx 2-1:0.219: Video interface 219 found: 19:51:12 executing program 4: socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309008000a000", 0x33a) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfd}, 0xda089036b57de603) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309008000a000", 0x33a) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x1c3, 0x2400c010, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect(r2, &(0x7f0000000180)=@nl=@unspec, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r4 = dup(r2) sendfile(r4, r3, 0x0, 0x523) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect(r5, &(0x7f0000000180)=@nl=@unspec, 0x80) syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r6 = socket$inet6(0xa, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES64=0x0], @ANYRES16, @ANYBLOB="000829bd7000fddbdf25030006000000000000000000000000000c00030007000000000000000c00040008000000000000000c000008006c000000000000000c000200f52c2f74000000000c00060000a666414e000000000000050100"/110], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) 19:51:12 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)='W', 0x1}]) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001500)) 19:51:12 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) 19:51:12 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x1f6, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x600}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 19:51:12 executing program 5: r0 = socket$inet6(0xa, 0x20000000003, 0x8000000002c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 19:51:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1480.145061][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1480.154245][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1480.176094][ T7434] em28xx 2-1:0.219: unknown em28xx chip ID (0) [ 1480.187473][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1480.196747][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1480.413977][ T7434] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 1480.422376][ T7434] em28xx 2-1:0.219: board has no eeprom [ 1480.543918][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1480.551970][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1480.560208][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1480.568403][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1480.576584][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1480.623452][ T7434] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 1480.631451][ T7434] em28xx 2-1:0.219: analog set to bulk mode. [ 1480.639316][ T2831] em28xx 2-1:0.219: Registering V4L2 extension 19:51:12 executing program 5: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f0000244000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000000)=@ethtool_cmd={0x9}}) [ 1480.683806][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1480.710435][ T7434] usb 2-1: USB disconnect, device number 82 [ 1480.717429][ T7434] em28xx 2-1:0.219: Disconnecting em28xx 19:51:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) close(r2) close(r1) pipe(&(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xc0, 0x0) close(r4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) 19:51:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x7a03, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002f008151e00f80ecdb4cb904114865160b00030014000000000000140e00060015000000dc2976d153b4", 0x2e}], 0x1}, 0x0) [ 1480.833742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1480.849482][ T2831] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 1480.856923][ T2831] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 1480.864253][ T2831] em28xx 2-1:0.219: No AC97 audio processor [ 1480.962476][ T2831] usb 2-1: Decoder not found [ 1480.967384][ T2831] em28xx 2-1:0.219: failed to create media graph [ 1480.973989][ T2831] em28xx 2-1:0.219: V4L2 device video43 deregistered [ 1480.988061][ T9280] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1480.996802][ T9280] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 19:51:13 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x1f6, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x600}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 1481.023715][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! 19:51:13 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x12, 0xf4, 0x96, 0x8, 0x2040, 0xb111, 0x862c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0x3e, 0xb1}}]}}]}}, 0x0) [ 1481.100146][ T2831] em28xx 2-1:0.219: Remote control support is not available for this card. 19:51:13 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xad, 0x78, 0xaa, 0x8, 0xafa, 0x3e8, 0xc42d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xec, 0x94, 0xe1, 0x0, [], [{{0x7, 0x5, 0x85}}]}}]}}]}}, 0x0) [ 1481.146891][ T7434] em28xx 2-1:0.219: Closing input extension [ 1481.148299][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1481.170407][ T7434] em28xx 2-1:0.219: Freeing device [ 1481.223707][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! 19:51:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) close(r2) close(r1) pipe(&(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xc0, 0x0) close(r4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) 19:51:13 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @remote}, "040088beffff0800"}}}}}, 0x0) [ 1481.310477][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1481.385680][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1481.464596][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1481.594847][ T2831] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1481.603756][T28611] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1481.623695][ T7434] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1481.623895][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1481.639592][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1481.853469][ T2831] usb 6-1: Using ep0 maxpacket: 8 [ 1481.863487][T28611] usb 5-1: Using ep0 maxpacket: 8 [ 1481.983611][ T2831] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1481.991727][ T2831] usb 6-1: config 0 has no interface number 0 [ 1481.998262][ T2831] usb 6-1: New USB device found, idVendor=2040, idProduct=b111, bcdDevice=86.2c [ 1482.003450][T28611] usb 5-1: config 0 has an invalid interface number: 26 but max is 0 [ 1482.007519][ T2831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.015803][T28611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.015888][T28611] usb 5-1: config 0 has no interface number 0 [ 1482.026855][ T7434] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1482.035667][T28611] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=c4.2d [ 1482.041698][ T7434] usb 2-1: config 0 has no interface number 0 [ 1482.049970][T28611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.059122][ T7434] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 1482.082300][ T7434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.092511][T28611] usb 5-1: config 0 descriptor?? [ 1482.092578][ T2831] usb 6-1: config 0 descriptor?? [ 1482.108437][ T7434] usb 2-1: config 0 descriptor?? [ 1482.128855][ T2831] cx231xx 6-1:0.1: New device @ 480 Mbps (2040:b111) with 1 interfaces [ 1482.138247][ T2831] cx231xx 6-1:0.1: Not found matching IAD interface [ 1482.158940][ T7434] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 1482.168351][ T7434] em28xx 2-1:0.219: Video interface 219 found: [ 1482.330640][ T2831] usb 6-1: USB disconnect, device number 101 [ 1482.365128][T28611] usbtouchscreen: probe of 5-1:0.26 failed with error -71 [ 1482.382309][T28611] usb 5-1: USB disconnect, device number 22 [ 1482.413584][ T7434] em28xx 2-1:0.219: unknown em28xx chip ID (0) [ 1482.573554][ T7434] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 1482.581879][ T7434] em28xx 2-1:0.219: board has no eeprom [ 1482.703397][ T7434] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 1482.711418][ T7434] em28xx 2-1:0.219: analog set to bulk mode. [ 1482.718248][ T2831] em28xx 2-1:0.219: Registering V4L2 extension [ 1482.744376][ T7434] usb 2-1: USB disconnect, device number 83 [ 1482.751017][ T7434] em28xx 2-1:0.219: Disconnecting em28xx [ 1482.757040][ T2831] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 1482.764469][ T2831] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 1482.771640][ T2831] em28xx 2-1:0.219: No AC97 audio processor [ 1482.779220][ T2831] usb 2-1: Decoder not found [ 1482.784050][ T2831] em28xx 2-1:0.219: failed to create media graph [ 1482.790454][ T2831] em28xx 2-1:0.219: V4L2 device video43 deregistered [ 1482.801817][ T2831] em28xx 2-1:0.219: Remote control support is not available for this card. [ 1482.810804][ T7434] em28xx 2-1:0.219: Closing input extension [ 1482.823873][ T7434] em28xx 2-1:0.219: Freeing device 19:51:14 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) 19:51:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x32, &(0x7f0000001580), 0x4) 19:51:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) close(r2) close(r1) pipe(&(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xc0, 0x0) close(r4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) 19:51:14 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x1f6, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x600}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 19:51:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40104593, &(0x7f0000debff0)={0x0, 0x0, 0x0}) unshare(0x2060400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x1f9, 0x0}) 19:51:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) close(r2) close(r1) pipe(&(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xc0, 0x0) close(r4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x12) [ 1483.109964][ T2831] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1483.123424][T12776] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1483.303972][ C1] net_ratelimit: 26 callbacks suppressed [ 1483.303996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.316229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.358365][ T2831] usb 6-1: Using ep0 maxpacket: 8 19:51:15 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024400010100000009040000000206"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100001, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x2c5) ioctl$TUNSETIFINDEX(r0, 0x5101, 0x0) [ 1483.384068][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.390322][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.396882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.403199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.407655][T12776] usb 5-1: Using ep0 maxpacket: 8 [ 1483.409550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.414350][ T7434] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1483.420274][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:15 executing program 0: unshare(0x20400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, 0x0}) [ 1483.508216][ T2831] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1483.516653][ T2831] usb 6-1: config 0 has no interface number 0 [ 1483.522829][ T2831] usb 6-1: New USB device found, idVendor=2040, idProduct=b111, bcdDevice=86.2c [ 1483.532222][ T2831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.555752][ T2831] usb 6-1: config 0 descriptor?? [ 1483.577479][T12776] usb 5-1: config 0 has an invalid interface number: 26 but max is 0 [ 1483.585890][T12776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.596370][T12776] usb 5-1: config 0 has no interface number 0 [ 1483.602617][T12776] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=c4.2d [ 1483.611915][T12776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.639556][ T2831] cx231xx 6-1:0.1: New device @ 480 Mbps (2040:b111) with 1 interfaces [ 1483.648254][ T2831] cx231xx 6-1:0.1: Not found matching IAD interface [ 1483.698438][T12776] usb 5-1: config 0 descriptor?? [ 1483.797930][ T7434] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1483.806322][ T7434] usb 2-1: config 0 has no interface number 0 [ 1483.812567][ T7434] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 1483.821842][ T7434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.836464][ T2831] usb 6-1: USB disconnect, device number 102 [ 1483.874305][ T7434] usb 2-1: config 0 descriptor?? [ 1483.928952][ T7434] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 1483.938487][ T7434] em28xx 2-1:0.219: Video interface 219 found: [ 1483.964127][T12776] usbtouchscreen: probe of 5-1:0.26 failed with error -71 [ 1483.975379][T12776] usb 5-1: USB disconnect, device number 23 [ 1484.103709][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1484.110028][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1484.194021][ T7434] em28xx 2-1:0.219: unknown em28xx chip ID (0) 19:51:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:51:16 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0) mq_getsetattr(r0, 0x0, 0x0) 19:51:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0xc0010207], [0xc1]}) 19:51:16 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x1f6, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x600}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 1484.341081][ T7434] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 1484.349466][ T7434] em28xx 2-1:0.219: board has no eeprom [ 1484.406070][ T9351] binder: 9346:9351 ioctl c018620b 20000000 returned -14 [ 1484.484150][ T7434] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 1484.492083][ T7434] em28xx 2-1:0.219: analog set to bulk mode. [ 1484.503912][T12776] em28xx 2-1:0.219: Registering V4L2 extension [ 1484.568439][ T7434] usb 2-1: USB disconnect, device number 84 [ 1484.575546][ T7434] em28xx 2-1:0.219: Disconnecting em28xx [ 1484.581443][T12776] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 1484.588630][T12776] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 1484.595909][T12776] em28xx 2-1:0.219: No AC97 audio processor [ 1484.684460][T12776] usb 2-1: Decoder not found [ 1484.689240][T12776] em28xx 2-1:0.219: failed to create media graph [ 1484.696204][T12776] em28xx 2-1:0.219: V4L2 device video43 deregistered [ 1484.746932][T12776] em28xx 2-1:0.219: Remote control support is not available for this card. [ 1484.772665][ T7434] em28xx 2-1:0.219: Closing input extension [ 1484.788342][ T7434] em28xx 2-1:0.219: Freeing device 19:51:16 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) 19:51:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000140), 0x1, 0x0, 0x0, 0x0, 0x0) 19:51:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0xc01, &(0x7f0000000480)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 19:51:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10081}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff7}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x180}, 0x20040840) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 19:51:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 19:51:17 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x49, 0xdb, 0x2e, 0x8, 0xc45, 0x1010, 0x6d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x1, 0x62, 0xf0, 0x4, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$char_usb(r0, 0x0, 0x0) 19:51:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100048}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) 19:51:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 19:51:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) 19:51:17 executing program 5: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) socket$unix(0x1, 0x0, 0x0) [ 1485.343693][ T7434] usb 2-1: new high-speed USB device number 85 using dummy_hcd 19:51:17 executing program 5: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) socket$unix(0x1, 0x0, 0x0) 19:51:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='gid_map\x00') pread64(r0, 0x0, 0x0, 0x0) lseek(r0, 0x40000000003b, 0x0) [ 1485.504119][T12776] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1485.724276][ T7434] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1485.732693][ T7434] usb 2-1: config 0 has no interface number 0 [ 1485.739334][ T7434] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 1485.748640][ T7434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.775667][ T7434] usb 2-1: config 0 descriptor?? [ 1485.790574][T12776] usb 5-1: Using ep0 maxpacket: 8 [ 1485.819477][ T7434] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 1485.829393][ T7434] em28xx 2-1:0.219: Video interface 219 found: [ 1485.924266][T12776] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 1485.932554][T12776] usb 5-1: config 0 has no interface number 0 [ 1485.938929][T12776] usb 5-1: config 0 interface 203 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1485.950297][T12776] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 1485.959500][T12776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.969021][T12776] usb 5-1: config 0 descriptor?? [ 1486.027686][T12776] yurex 5-1:0.203: USB YUREX device now attached to Yurex #0 [ 1486.123642][ T7434] em28xx 2-1:0.219: unknown em28xx chip ID (0) [ 1486.228284][T28657] usb 5-1: USB disconnect, device number 24 [ 1486.245036][T28657] yurex 5-1:0.203: USB YUREX #0 now disconnected [ 1486.263837][ T7434] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 1486.272054][ T7434] em28xx 2-1:0.219: board has no eeprom [ 1486.383345][ T7434] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 1486.391225][ T7434] em28xx 2-1:0.219: analog set to bulk mode. [ 1486.399832][T12776] em28xx 2-1:0.219: Registering V4L2 extension [ 1486.411935][ T7434] usb 2-1: USB disconnect, device number 85 [ 1486.418788][ T7434] em28xx 2-1:0.219: Disconnecting em28xx [ 1486.434257][T12776] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 1486.441429][T12776] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 1486.448920][T12776] em28xx 2-1:0.219: No AC97 audio processor [ 1486.456035][T12776] usb 2-1: Decoder not found [ 1486.460695][T12776] em28xx 2-1:0.219: failed to create media graph [ 1486.467325][T12776] em28xx 2-1:0.219: V4L2 device video43 deregistered [ 1486.484540][T12776] em28xx 2-1:0.219: Remote control support is not available for this card. [ 1486.493415][ T7434] em28xx 2-1:0.219: Closing input extension [ 1486.503451][ T7434] em28xx 2-1:0.219: Freeing device 19:51:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x101000000000001, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x21b) 19:51:18 executing program 5: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) socket$unix(0x1, 0x0, 0x0) 19:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0x17, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 19:51:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100048}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) 19:51:18 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000000)=0x11c) [ 1487.003442][ T7434] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1487.243356][ T7434] usb 5-1: Using ep0 maxpacket: 8 [ 1487.383487][ T7434] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 1487.391828][ T7434] usb 5-1: config 0 has no interface number 0 [ 1487.398182][ T7434] usb 5-1: config 0 interface 203 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1487.409475][ T7434] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 1487.418712][ T7434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.428252][ T7434] usb 5-1: config 0 descriptor?? [ 1487.481278][ T7434] yurex 5-1:0.203: USB YUREX device now attached to Yurex #0 19:51:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000100)={0x7c, 0x0, [0xc0010203]}) 19:51:19 executing program 5: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) socket$unix(0x1, 0x0, 0x0) 19:51:19 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001200ff8dffffffffffff005e07000000000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) 19:51:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x14a) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 19:51:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket(0x0, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) faccessat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x5, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000580)=0x0) getpgrp(r5) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x402c560b, &(0x7f0000000380)={0x78, 0x50, &(0x7f00000006c0)="cf18f550eb27d5ca121c63617faffae537b0e885be393a060f57ccecb1acdbfab752b5cda07b14cfc0df9ffbb328eab005e8022e651995a59952a8320a06a5f6896a8e2ab7d67a54aae5ccad65f8962a0ef10b185a70482e62d79262a02bf5f1e6ff9a2ae76104b55a25c3b9e972704a22f71deab7d0d37c0d99e2d8a41a5eb8f01a7fa3cefa65a6e3278dd4a9c89dd6d7adf142e950da97651fcf58e10880e3474b88d370fd9a04962974aa4afcff084450b5647d9d3901981b7179aa9cd0b10cf42e544dcfc48e198d1342ab0e28a2febe8e939b9f9876", {0xffffff6e, 0x70000, 0x556515fb, 0x7, 0x7, 0x8, 0x8, 0xe34}}) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x3) 19:51:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100048}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) [ 1487.730255][T28657] usb 5-1: USB disconnect, device number 25 [ 1487.744905][T28657] yurex 5-1:0.203: USB YUREX #0 now disconnected [ 1487.766249][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1487.849873][ T9649] input: syz1 as /devices/virtual/input/input210 19:51:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfc000000]}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) 19:51:20 executing program 0: r0 = inotify_init1(0x800) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/95, 0x5f}], 0x1) [ 1488.040543][ T9659] Started in network mode [ 1488.045780][ T9659] Own node identity ff010000000000000000000000000001, cluster identity 4711 [ 1488.054922][ T9659] Enabling of bearer rejected, failed to enable media 19:51:20 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 19:51:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00000000c0)=0x3d1) 19:51:20 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x74, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 19:51:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100048}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) 19:51:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 19:51:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x77}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 1488.455154][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 19:51:20 executing program 2: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x4}) 19:51:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x59565955}) 19:51:20 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84}], 0x10}, 0x0) 19:51:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 19:51:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) 19:51:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x83}, 0x98) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 19:51:21 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x2}}], 0x1c) 19:51:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000000)=0x8) [ 1489.064663][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1489.072898][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! 19:51:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:51:21 executing program 0: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000008c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0), 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) lstat(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getgid() socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002500), 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(&(0x7f0000000100)='./bus\x00', 0xee00, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0x0, 0x0) getpgrp(0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, r3, 0x0) creat(0x0, 0x0) getgroups(0x0, &(0x7f0000004cc0)) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) chown(0x0, 0xee00, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 19:51:21 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xd2c8, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 19:51:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000000)=0x8) 19:51:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306093068fe07072b03003700000a0014000200450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) [ 1489.543825][ C1] net_ratelimit: 30 callbacks suppressed [ 1489.543846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1489.556058][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1489.586297][T10114] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1489.595129][T10114] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1489.623710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1489.629974][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:21 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x3}}) [ 1489.636558][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1489.642802][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1489.649289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1489.655629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1489.707056][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 19:51:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x20000800}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f4070009042402000000ffcc9ac700000000", 0x1c) 19:51:21 executing program 4: r0 = socket$kcm(0x11, 0x100000000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000331fe4ac14140cebdf2cd6", 0x14}], 0x1}, 0x0) 19:51:21 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000ebffffffbd7000ffffffff0000fffc0c00000000000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c200f0ffff9f00000000cd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:51:21 executing program 2: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80) 19:51:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 19:51:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x20000800}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f4070009042402000000ffcc9ac700000000", 0x1c) 19:51:22 executing program 4: r0 = socket$kcm(0x11, 0x100000000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000331fe4ac14140cebdf2cd6", 0x14}], 0x1}, 0x0) [ 1490.343731][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1490.350052][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:51:22 executing program 2: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80) 19:51:22 executing program 0: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000008c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0), 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) lstat(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getgid() socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002500), 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(&(0x7f0000000100)='./bus\x00', 0xee00, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0x0, 0x0) getpgrp(0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, r3, 0x0) creat(0x0, 0x0) getgroups(0x0, &(0x7f0000004cc0)) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) chown(0x0, 0xee00, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 19:51:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x20000800}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f4070009042402000000ffcc9ac700000000", 0x1c) 19:51:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0xaaaabb8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) lstat(0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0xab) gettid() 19:51:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1bd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb9ae0a480e1814000000e8bd00fb120009000e00010040000000050005001204", 0x2e}], 0x1}, 0x0) 19:51:22 executing program 2: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80) 19:51:22 executing program 4: r0 = socket$kcm(0x11, 0x100000000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000331fe4ac14140cebdf2cd6", 0x14}], 0x1}, 0x0) 19:51:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x20000800}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f4070009042402000000ffcc9ac700000000", 0x1c) 19:51:23 executing program 2: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80) [ 1491.000655][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1491.009723][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! 19:51:23 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(0x0, r1, 0x9, r0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000480)) r2 = syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) time(0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)=""/233, 0xe9) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) fgetxattr(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472006d0935ee2674569f08100010000000"], 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000000c0)='rose0\x00', 0x7, 0xae, 0x103}) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x2e5, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}}, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 19:51:23 executing program 4: r0 = socket$kcm(0x11, 0x100000000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000331fe4ac14140cebdf2cd6", 0x14}], 0x1}, 0x0) 19:51:23 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0xa1, 0xb2, 0x20, 0x1498, 0xa090, 0x5af8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf3, 0x1, 0x0, 0x67, 0xb3, 0xda}}]}}]}}, 0x0) 19:51:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffcfb, &(0x7f0000000200)=[{&(0x7f0000000100)="8cb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f68cd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce373751008f2fe11265fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd035877eaf2c6b56cdebc12feefdd198891969cc07ec80aa290be65a7fa0866e97a784c0ac21edab15d06cfb51b0fa7e5f4404000000000000", 0xbc}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0x28c}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)='B', 0x1}], 0x1, 0x0, 0x362}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="6704848d55e654ad6f06f85d5c8caed968361a080c9a53252ca10c8e9f2257b4300eccf6f7e8f49e10382d24c8e304851ba9f674097b80c63dc396090a3762753a1400aba6fc2b7dcec89c4c03bb4f4a995e7f0d40", 0x15e}], 0x1}}], 0x3, 0x40000) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000001140), &(0x7f0000001180), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0xffffff7e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x0, 0x0, 0x0) 19:51:23 executing program 0: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000008c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0), 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) lstat(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getgid() socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002500), 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(&(0x7f0000000100)='./bus\x00', 0xee00, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0x0, 0x0) getpgrp(0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, r3, 0x0) creat(0x0, 0x0) getgroups(0x0, &(0x7f0000004cc0)) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) chown(0x0, 0xee00, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 19:51:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r1, 0x2) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000440)) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 1491.663602][T12776] usb 2-1: new high-speed USB device number 86 using dummy_hcd 19:51:23 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init() r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x80) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000000) 19:51:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9cX\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xc5\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x47) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x28008004) [ 1491.903416][T12776] usb 2-1: Using ep0 maxpacket: 32 [ 1492.024333][T12776] usb 2-1: config 0 has an invalid interface number: 243 but max is 0 [ 1492.032740][T12776] usb 2-1: config 0 has no interface number 0 [ 1492.039099][T12776] usb 2-1: config 0 interface 243 has no altsetting 0 [ 1492.046108][T12776] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=5a.f8 [ 1492.055389][T12776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) [ 1492.230090][T12776] usb 2-1: config 0 descriptor?? [ 1492.297035][T10604] IPVS: ftp: loaded support on port[0] = 21 19:51:24 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init() r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x80) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000000) 19:51:24 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(0x0, r1, 0x9, r0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000480)) r2 = syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) time(0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)=""/233, 0xe9) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) fgetxattr(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472006d0935ee2674569f08100010000000"], 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000000c0)='rose0\x00', 0x7, 0xae, 0x103}) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x2e5, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}}, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 19:51:24 executing program 0: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000008c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0), 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) lstat(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getgid() socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002500), 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(&(0x7f0000000100)='./bus\x00', 0xee00, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0x0, 0x0) getpgrp(0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, r3, 0x0) creat(0x0, 0x0) getgroups(0x0, &(0x7f0000004cc0)) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) chown(0x0, 0xee00, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 1492.497019][T12776] dvb_usb_m920x: probe of 2-1:0.243 failed with error -71 [ 1492.532699][T12776] usb 2-1: USB disconnect, device number 86 19:51:24 executing program 2: r0 = socket$unix(0x1, 0x80000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) accept4(r1, 0x0, 0x0, 0x0) 19:51:24 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init() r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x80) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000000) [ 1493.243846][T12776] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1493.483758][T12776] usb 2-1: Using ep0 maxpacket: 32 [ 1493.603853][T12776] usb 2-1: config 0 has an invalid interface number: 243 but max is 0 [ 1493.612118][T12776] usb 2-1: config 0 has no interface number 0 [ 1493.618557][T12776] usb 2-1: config 0 interface 243 has no altsetting 0 [ 1493.625473][T12776] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=5a.f8 [ 1493.634722][T12776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.645187][T12776] usb 2-1: config 0 descriptor?? [ 1493.893619][T12776] dvb_usb_m920x: probe of 2-1:0.243 failed with error -71 [ 1493.903348][T12776] usb 2-1: USB disconnect, device number 87 19:51:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x5, 0x3}]}}}], 0x18}, 0x0) 19:51:26 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init() r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x80) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000000) 19:51:26 executing program 2: r0 = socket$unix(0x1, 0x80000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) accept4(r1, 0x0, 0x0, 0x0) 19:51:26 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(0x0, r1, 0x9, r0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000480)) r2 = syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) time(0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)=""/233, 0xe9) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) fgetxattr(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472006d0935ee2674569f08100010000000"], 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000000c0)='rose0\x00', 0x7, 0xae, 0x103}) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x2e5, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}}, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 19:51:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:51:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="181500e9a2ace5d22324c1429e6c037b504fb02611fe770913043bff67a0"], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='}', 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$isdn(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 19:51:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)}, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8c, 0x11, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:51:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 19:51:26 executing program 2: r0 = socket$unix(0x1, 0x80000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) accept4(r1, 0x0, 0x0, 0x0) [ 1494.725804][T10798] IPVS: ftp: loaded support on port[0] = 21 19:51:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff00, &(0x7f0000c8d000)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r1, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 19:51:27 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f0000c34fff), 0xc06f) write(r1, &(0x7f0000000080)='#', 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) 19:51:27 executing program 2: r0 = socket$unix(0x1, 0x80000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) accept4(r1, 0x0, 0x0, 0x0) [ 1495.046319][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1495.055875][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:51:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="181500e9a2ace5d22324c1429e6c037b504fb02611fe770913043bff67a0"], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='}', 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:27 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x38}, 0x0) 19:51:27 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(0x0, r1, 0x9, r0, 0x2) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000480)) r2 = syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) time(0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)=""/233, 0xe9) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) fgetxattr(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472006d0935ee2674569f08100010000000"], 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000000c0)='rose0\x00', 0x7, 0xae, 0x103}) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x2e5, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}}, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) [ 1495.395781][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1495.405280][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:51:27 executing program 2: unshare(0x400) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x10) 19:51:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x34de) 19:51:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="181500e9a2ace5d22324c1429e6c037b504fb02611fe770913043bff67a0"], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='}', 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1495.793780][ C1] net_ratelimit: 28 callbacks suppressed [ 1495.793804][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1495.805954][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000300)={0x80000000002}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2, 0xfdfd}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x200000000000002}) 19:51:27 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) [ 1495.863883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1495.870201][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1495.876853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1495.883223][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1495.889778][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1495.896143][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0000010000000009000000ac9e7bf5707c50810201ac24ea15ac14140dac1414aaffff000000003d5e52bbe622e35a5330000000948df96cd8d66aeafbae78ceec18e8b105eddb24ab7e41c4ca749f54cf5bbaa737f62543b5a3616919a8aaf2ee23926feba29ae54182f24975d42e9c35fab91eeb087e48da3f65c9b18f0e2720c7a053abed9031b02364f100100aa2d9b8904400000000"], 0x34) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e00000027f0000010000000009000000ac9e7bf5707c50810201ac24ea15ac14140dac1414aaffff00c3f7fa3d3512057ed9fa0000003d5e52bbe622e35a5330000000948df96cd8d66aeafbae78ceec18e8b105eddb24ab7e41c4ca749f54cf5bbaa72ef62543b5a3616919a8aaf2ee23926feba29ae54182f24975d42e9c35fab91eeb087e48da3f65c9b18f0e2720c7a029ee3a0631b02364f10010e7bf36ce21c8410faae097b3df49adcf22b6175b135080503105d9f6c1c708bf4ce3acf1908c10a6e51258ab89a72f504a0ad879da72de5717faa61fc6b900b140"], 0x34) close(r0) 19:51:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a) perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 19:51:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="181500e9a2ace5d22324c1429e6c037b504fb02611fe770913043bff67a0"], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='}', 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x2000000000000000}, 0x0) 19:51:28 executing program 3: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) [ 1496.598476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1496.604740][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:51:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) unshare(0x400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7a) 19:51:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71082300000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 19:51:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x2000000000000000}, 0x0) [ 1497.021564][T11228] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 19:51:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000000c0)=0xcf7, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r1 = dup(r0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19:51:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x20000000005, 0xe00000000000000}, [@typed={0x8, 0xa, @ipv4=@empty}]}, 0x1c}}, 0x0) 19:51:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x2000000000000000}, 0x0) 19:51:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) 19:51:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 19:51:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000000c0)=0xcf7, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r1 = dup(r0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19:51:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x2000000000000000}, 0x0) 19:51:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000022000104000200a600000000000000b0bf547b5f6d349da44f078f1201010000000000008aab186bdc8af61121be129ca86ecd55927a3d6d4ee9a52d00"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@remote}, [@srcaddr={0x14, 0xd, @in6=@mcast2}]}, 0x3c}, 0x8}, 0x0) 19:51:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x20000000005, 0xe00000000000000}, [@typed={0x8, 0xa, @ipv4=@empty}]}, 0x1c}}, 0x0) 19:51:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 1497.610375][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 19:51:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000000c0)=0xcf7, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r1 = dup(r0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19:51:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) 19:51:29 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x2b, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 19:51:30 executing program 4: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x3) socket$pptp(0x18, 0x1, 0x2) select(0x40, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 19:51:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x20000000005, 0xe00000000000000}, [@typed={0x8, 0xa, @ipv4=@empty}]}, 0x1c}}, 0x0) 19:51:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000000c0)=0xcf7, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r1 = dup(r0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19:51:30 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f07e8e102a1105009a4e0000000109022400010000000009049b0002131349000905051200000000ffffffffffffffff0000"], 0x0) 19:51:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x20000000005, 0xe00000000000000}, [@typed={0x8, 0xa, @ipv4=@empty}]}, 0x1c}}, 0x0) 19:51:30 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/1, &(0x7f0000000100)=0x1) [ 1498.593644][ T7434] usb 3-1: new high-speed USB device number 116 using dummy_hcd 19:51:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x6, 0xb, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 19:51:30 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 19:51:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="10000040020000000000000000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 19:51:30 executing program 3: r0 = socket(0xa, 0x80806, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) shutdown(r0, 0x1) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x0) [ 1498.833499][ T7434] usb 3-1: Using ep0 maxpacket: 16 19:51:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) [ 1498.955395][ T7434] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 1498.964212][ T7434] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1498.974937][ T7434] usb 3-1: config 0 has no interface number 0 [ 1498.981235][ T7434] usb 3-1: config 0 interface 155 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1498.991486][ T7434] usb 3-1: config 0 interface 155 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1499.004891][ T7434] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=4e.9a [ 1499.014146][ T7434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b0b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae00"}) [ 1499.140578][ T7434] usb 3-1: config 0 descriptor?? 19:51:31 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 1499.188396][ T7434] redrat3 3-1:0.155: Couldn't find all endpoints 19:51:31 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 1499.387239][ T7434] usb 3-1: USB disconnect, device number 116 19:51:31 executing program 5: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) [ 1500.403415][T12776] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1500.653321][T12776] usb 3-1: Using ep0 maxpacket: 16 [ 1500.773597][T12776] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 1500.782100][T12776] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1500.792596][T12776] usb 3-1: config 0 has no interface number 0 [ 1500.798916][T12776] usb 3-1: config 0 interface 155 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1500.808930][T12776] usb 3-1: config 0 interface 155 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1500.822207][T12776] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=4e.9a [ 1500.831713][T12776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.841305][T12776] usb 3-1: config 0 descriptor?? [ 1500.897682][T12776] redrat3 3-1:0.155: Couldn't find all endpoints [ 1501.096598][T28657] usb 3-1: USB disconnect, device number 117 19:51:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=ANY=[@ANYBLOB="a3ffffec479197292ace63868550d32fff000000e8ff01800000000000000000000000000059030000e31d02e3956f2abe7beab54c8f3a6c12f9a97e9fdf9301bf8c60da0b2f2598f473c29eebd5250700002748000000b66fcf47e6bf2fc798775147541d12a7ee8a48934e0957d476d6b1e409d17290b0c4483ec7ce2ec5fc9f479da4d4567f6222ca4d3f03177142312affffff8140650e259edd32a4dac0ccd7f905b4dcab6f2c7cb18ff3041c04b1a85cff6eeaac9468001000000000000080480ed2ae468ebc00"]) 19:51:33 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 19:51:33 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 19:51:33 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="af3581ed7d04a35bf06a0fbd75ecbf9e", 0x10) getsockopt$inet6_tcp_int(r1, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x80fb268a) 19:51:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80}]}, 0x28}}, 0x0) 19:51:33 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00', 0x3}], 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000140), 0xc0e8c8e08fca5, 0x0) 19:51:33 executing program 0: socket(0x3, 0x0, 0x0) 19:51:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0xfffffffffffffffd}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)) 19:51:33 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 19:51:33 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 19:51:33 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x70, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 19:51:33 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x6, 0x2) bind(r0, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20, @remote}, 0x10) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/179, 0xb3}}], 0x1, 0x0, 0x0) [ 1501.743340][T12776] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1502.023879][ C1] net_ratelimit: 30 callbacks suppressed [ 1502.023903][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.036344][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.103855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.110445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.117179][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.123843][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.130556][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.137042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.144010][T12776] usb 3-1: config index 0 descriptor too short (expected 291, got 18) [ 1502.152732][T12776] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1502.161336][T12776] usb 3-1: config 0 has no interface number 0 [ 1502.167690][T12776] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=51.42 [ 1502.176930][T12776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.238228][T12776] usb 3-1: config 0 descriptor?? [ 1502.443764][T12776] viperboard 3-1:0.10: version 0.00 found at bus 003 address 118 [ 1502.483722][T12776] viperboard-i2c viperboard-i2c.10.auto: failure setting i2c_bus_freq to 100 [ 1502.492727][T12776] viperboard-i2c: probe of viperboard-i2c.10.auto failed with error -5 [ 1502.526147][T12776] usb 3-1: USB disconnect, device number 118 [ 1502.824561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.830743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1503.273291][T28657] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1503.633491][T28657] usb 3-1: config index 0 descriptor too short (expected 291, got 18) [ 1503.641730][T28657] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1503.650110][T28657] usb 3-1: config 0 has no interface number 0 [ 1503.656445][T28657] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=51.42 [ 1503.665722][T28657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.675710][T28657] usb 3-1: config 0 descriptor?? [ 1503.783672][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1503.853747][T28657] viperboard 3-1:0.10: version 0.00 found at bus 003 address 119 [ 1503.883655][T28657] viperboard-i2c viperboard-i2c.10.auto: failure setting i2c_bus_freq to 100 [ 1503.892717][T28657] viperboard-i2c: probe of viperboard-i2c.10.auto failed with error -5 [ 1503.917720][T28657] usb 3-1: USB disconnect, device number 119 19:51:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x117, &(0x7f0000000080)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x32}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 19:51:36 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xf0, 0xf8, 0xaf, 0x10, 0x1943, 0x2255, 0x9e44, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xa8, 0xee, 0xad, 0x0, [], [{{0x9, 0x5, 0x8f}}, {{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) 19:51:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0xffffffffffffff87) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 19:51:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x22, &(0x7f0000000080)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) 19:51:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@newlink={0xa8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa8}}, 0x0) 19:51:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=ANY=[@ANYBLOB="a3ffffec479197292ace63868550d32fff000000e8ff01800000000000000000000000000059030000e31d02e3956f2abe7beab54c8f3a6c12f9a97e9fdf9301bf8c60da0b2f2598f473c29eebd5250700002748000000b66fcf47e6bf2fc798775147541d12a7ee8a48934e0957d476d6b1e409d17290b0c4483ec7ce2ec5fc9f479da4d4567f6222ca4d3f03177142312affffff8140650e259edd32a4dac0ccd7f905b4dcab6f2c7cb18ff3041c04b1a85cff6eeaac9468001000000000000080480ed2ae468ebc00"]) [ 1504.425537][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1504.453916][T11952] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1504.462210][T11952] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 19:51:36 executing program 1: creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='cgroup\x00', 0x0, &(0x7f0000000840)='none\x00') [ 1504.559403][T11960] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1504.568277][T11960] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 19:51:36 executing program 4: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f000067bff0)={0x0, 0xffff}) fstat(r0, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000001000/0xc000)=nil, &(0x7f0000000180)) 19:51:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000076ed76c9ca8bd81d610016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"], 0xb8}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x12, 0x0, 0x0) [ 1504.670110][T11967] cgroup1: Need name or subsystem set 19:51:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="000f01db"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_map}) [ 1504.754104][T12776] usb 6-1: new high-speed USB device number 103 using dummy_hcd 19:51:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") io_setup(0x13, &(0x7f0000000100)=0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r2, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[0x0]) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x0) 19:51:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 19:51:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) [ 1505.005522][T12776] usb 6-1: Using ep0 maxpacket: 16 [ 1505.013963][T28657] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1505.135663][T12776] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 1505.144282][T12776] usb 6-1: config 0 has no interface number 0 [ 1505.150644][T12776] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=9e.44 [ 1505.159997][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.216088][T12776] usb 6-1: config 0 descriptor?? [ 1505.258026][T12776] s2255 6-1:0.139: Could not find bulk-in endpoint [ 1505.265276][T12776] Sensoray 2255 driver load failed: 0xfffffff4 [ 1505.271591][T12776] s2255: probe of 6-1:0.139 failed with error -12 [ 1505.374013][T28657] usb 3-1: config index 0 descriptor too short (expected 291, got 18) [ 1505.382421][T28657] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1505.390800][T28657] usb 3-1: config 0 has no interface number 0 [ 1505.397180][T28657] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=51.42 [ 1505.406446][T28657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.416204][T28657] usb 3-1: config 0 descriptor?? [ 1505.456223][T12776] usb 6-1: USB disconnect, device number 103 [ 1505.593745][T28657] viperboard 3-1:0.10: version 0.00 found at bus 003 address 120 [ 1505.630075][T28657] viperboard-i2c viperboard-i2c.10.auto: failure setting i2c_bus_freq to 100 [ 1505.648356][T28657] viperboard-i2c: probe of viperboard-i2c.10.auto failed with error -5 [ 1505.669792][T28657] usb 3-1: USB disconnect, device number 120 [ 1506.233442][T28657] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1506.344614][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1506.473434][T28657] usb 6-1: Using ep0 maxpacket: 16 [ 1506.593606][T28657] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 1506.601984][T28657] usb 6-1: config 0 has no interface number 0 [ 1506.608418][T28657] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=9e.44 [ 1506.617628][T28657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.627439][T28657] usb 6-1: config 0 descriptor?? [ 1506.667992][T28657] s2255 6-1:0.139: Could not find bulk-in endpoint [ 1506.674874][T28657] Sensoray 2255 driver load failed: 0xfffffff4 [ 1506.681196][T28657] s2255: probe of 6-1:0.139 failed with error -12 [ 1506.865472][T28657] usb 6-1: USB disconnect, device number 104 19:51:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@generic={0x0, 0x2}]}}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:51:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:51:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x0, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fa71ca08000000bd55a4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e2dc90f1dcf80de938c00000000001900"}) 19:51:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'sit0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x4000030000000304, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\xecJ\x00\x965\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @random="40be9a6a2627"}, 0x2, {0x2, 0x0, @remote}, '\xecJ\x00\x965\x00'}) 19:51:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=ANY=[@ANYBLOB="a3ffffec479197292ace63868550d32fff000000e8ff01800000000000000000000000000059030000e31d02e3956f2abe7beab54c8f3a6c12f9a97e9fdf9301bf8c60da0b2f2598f473c29eebd5250700002748000000b66fcf47e6bf2fc798775147541d12a7ee8a48934e0957d476d6b1e409d17290b0c4483ec7ce2ec5fc9f479da4d4567f6222ca4d3f03177142312affffff8140650e259edd32a4dac0ccd7f905b4dcab6f2c7cb18ff3041c04b1a85cff6eeaac9468001000000000000080480ed2ae468ebc00"]) [ 1507.490016][T12012] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:51:39 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x81801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6, 0x1800000000000000]}}, 0x20) 19:51:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90a, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:51:39 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0xa4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fchmod(r1, 0x0) 19:51:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x0, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fa71ca08000000bd55a4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e2dc90f1dcf80de938c00000000001900"}) [ 1507.764931][T28657] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1507.799185][T12204] usb usb4: usbfs: process 12204 (syz-executor.3) did not claim interface 0 before use 19:51:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/30, 0x1e}}], 0x1, 0x2040, 0x0) 19:51:39 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0xce, 0x0, &(0x7f0000000000)) 19:51:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:40 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 1508.151658][T12295] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1508.163863][T28657] usb 3-1: config index 0 descriptor too short (expected 291, got 18) [ 1508.172378][T28657] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1508.180837][T28657] usb 3-1: config 0 has no interface number 0 [ 1508.187152][T28657] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=51.42 19:51:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x71}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 1508.196414][T28657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x0, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fa71ca08000000bd55a4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e2dc90f1dcf80de938c00000000001900"}) [ 1508.266673][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1508.275791][ C1] net_ratelimit: 28 callbacks suppressed [ 1508.275812][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1508.288090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1508.343774][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1508.350054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1508.356686][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1508.362960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1508.369494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1508.375871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1508.420042][T28657] usb 3-1: config 0 descriptor?? [ 1508.468400][T12361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1508.625922][T28657] viperboard 3-1:0.10: version 0.00 found at bus 003 address 121 [ 1508.679552][T28657] viperboard-i2c viperboard-i2c.10.auto: failure setting i2c_bus_freq to 100 [ 1508.688848][T28657] viperboard-i2c: probe of viperboard-i2c.10.auto failed with error -5 [ 1508.770169][T28657] usb 3-1: USB disconnect, device number 121 [ 1509.064676][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1509.070896][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:51:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=ANY=[@ANYBLOB="a3ffffec479197292ace63868550d32fff000000e8ff01800000000000000000000000000059030000e31d02e3956f2abe7beab54c8f3a6c12f9a97e9fdf9301bf8c60da0b2f2598f473c29eebd5250700002748000000b66fcf47e6bf2fc798775147541d12a7ee8a48934e0957d476d6b1e409d17290b0c4483ec7ce2ec5fc9f479da4d4567f6222ca4d3f03177142312affffff8140650e259edd32a4dac0ccd7f905b4dcab6f2c7cb18ff3041c04b1a85cff6eeaac9468001000000000000080480ed2ae468ebc00"]) 19:51:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003580)={0x2, 0x0, [{0x0, 0xa6, &(0x7f0000000000)=""/166}, {0x0, 0x0, 0x0}]}) 19:51:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x0, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fa71ca08000000bd55a4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e2dc90f1dcf80de938c00000000001900"}) 19:51:41 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 1509.312332][T12381] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1509.324588][T12380] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:51:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 19:51:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901f671a9"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1509.545071][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! 19:51:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000dfa000/0x18000)=nil, 0x0, 0xfccc, 0x0, 0x0, 0xa00000000000000) [ 1509.658183][T12502] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1509.661050][T12776] usb 3-1: new high-speed USB device number 122 using dummy_hcd 19:51:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000300)=0x3) [ 1509.779440][T12507] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:51:42 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1510.047099][T12776] usb 3-1: config index 0 descriptor too short (expected 291, got 18) [ 1510.055920][T12776] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1510.064207][T12776] usb 3-1: config 0 has no interface number 0 [ 1510.070426][T12776] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=51.42 [ 1510.079660][T12776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.219149][T12776] usb 3-1: config 0 descriptor?? [ 1510.413604][T12776] viperboard 3-1:0.10: version 0.00 found at bus 003 address 122 [ 1510.443662][T12776] viperboard-i2c viperboard-i2c.10.auto: failure setting i2c_bus_freq to 100 [ 1510.453636][T12776] viperboard-i2c: probe of viperboard-i2c.10.auto failed with error -5 [ 1510.470780][T12776] usb 3-1: USB disconnect, device number 122 19:51:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@getstats={0x1c, 0x22, 0xffffff1f}, 0x1c}}, 0x0) 19:51:43 executing program 1: r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x4) pwritev(r0, 0x0, 0x0, 0x0) 19:51:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 19:51:43 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000080)=[0xffffffff], 0x0, 0x0) 19:51:43 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 19:51:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) 19:51:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) read$FUSE(r0, &(0x7f0000000440), 0x1000) 19:51:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x34d, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 19:51:43 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0xc) [ 1511.327011][T12658] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1511.337941][T12658] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 19:51:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[0x5, 0x2, 0x543, 0x2, 0xe80, 0x0, 0xe80, 0x0, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x8dffffff, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:51:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe00b1a83c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3b3eac5ba32e27a8ac341db4d1225e3f53fac8466d8e42bf187cb70b20559d92c0a1550339c04bc87a97afbd9f51612ba3933888d16b5700bc05b7ddf71eb2194a64ae455eea7e817714323a4af11859d84a01187734d10fc66"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x82000120, {0x77359400}, {0x5, 0xc, 0xf3, 0x7, 0x6, 0xdd, '&>HJ'}, 0x0, 0x0, @offset, 0x4}) 19:51:43 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25fe8000000000000005baa68754a30000000002000000000000000000000000002c00", 0x5ac}], 0x1}, 0x900) 19:51:43 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x50f}, 0x1}) 19:51:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[0x5, 0x2, 0x543, 0x2, 0xe80, 0x0, 0xe80, 0x0, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x8dffffff, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:51:43 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 19:51:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 19:51:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[0x5, 0x2, 0x543, 0x2, 0xe80, 0x0, 0xe80, 0x0, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x8dffffff, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:51:43 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 19:51:44 executing program 5: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 1512.053569][T28657] usb 5-1: new high-speed USB device number 26 using dummy_hcd 19:51:44 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000080)="660f21c53664f20f38f0ef0f06baf80c66b89462c78666efbafc0cb80040efd91bb80b018ec87d09dbf266b8010000000f01c10f01c5", 0x36}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[0x5, 0x2, 0x543, 0x2, 0xe80, 0x0, 0xe80, 0x0, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x8dffffff, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:51:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000300)=0x1d, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x0, 0x80000001, 0x1, 0xe5}, {0x1, 0x4, 0x6, 0x6}, {0xdd16, 0x2, 0x100, 0x3}, {0x4, 0x0, 0xff, 0x4c8e834c}, {0x1, 0x7, 0x1, 0x21}, {0x400000000000, 0x579, 0x8001, 0x126afab}, {0xfffffffffffffffd, 0xfff, 0x7fffffff, 0x9f}]}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2100, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x9) r5 = syz_open_procfs(r4, &(0x7f0000000640)='task\x00a/\x86\'Ph\x06*i]3\xb0\xef@q\x04L\xa0\xd4K\xd1\x03|\xdds\xbc\xe9\xc5 G`\x80R\xd2\xbe\xee\x14\xe6\"\xf5\xc9\x9fn8I\x9bI8\xc4`\xfbkD\xf3\r\xe7\xf9\xfe\x85\xfcN\xe4\xb4\xaa\xae\xdf\xddS\xd3\x8b{\xc5^\xcb\xe7\'fz1\xd4\x17,b\x7fY\xc4\xd0\\m\xe2d\x17rv\xe2\x04-\xeb\x19B\xf2\xdb\xc7\xb2\xe0\xc3}w\x95X\x12\xe3u\xc6G\xfc\xeaZ\xd1\xabH\x06G>\n\xb2*\xd7#\xa5E`T\xef\x97-\x9f\x99\xd3\x90&\x12uj\x12\x04DM!\x1c\xc0\xc8\xf62\x85\xe5q\b;SH\"O6-2\xcd\x85\xfc:\x88\x123\xfc\r\xf2\x1b\xb3\xc2d::O\xc2\x10\xb4*]\xf5\x05\x81\xf0DJ6\x17\x9d\xf82\xd1z\x1e\x00P\xf6\x0f\x9c\xc7\xa1r\x15;\xf5\x81|;\xadMR#n\x94\x13\xe91\xc5\n\xb0r\x93n;:q-\xe5\xcb\xe5,\xd4@\xc4k\x91Em\xe6\xc2\x91\x15W\x89\xfdh\x12\xccZt;\x9d}\x16u\x9c\x8e\x0282\x9d:r\xc4b\xccB\xf7{\x1c%2\xec\\p)\xeaT') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1, 0x1000000000400ffa) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000180)=""/204) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil) r6 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) [ 1512.294199][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 1512.413560][T28657] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.425583][T28657] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.436917][T28657] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1512.446128][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.514880][T28657] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 1512.699337][T28657] usb 5-1: USB disconnect, device number 26 [ 1513.483422][T28657] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1513.723343][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 1513.843499][T28657] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.854116][T28657] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.865384][T28657] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1513.874691][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.929774][T28657] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 1514.126061][ T7434] usb 5-1: USB disconnect, device number 27 [ 1514.503448][ C1] net_ratelimit: 31 callbacks suppressed [ 1514.503462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.515442][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1514.583513][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.589513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1514.595881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.601894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1514.608293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.614393][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:51:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 19:51:46 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)=0x32) close(r0) 19:51:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4138ae84, &(0x7f0000000040)={0x0, 0x5, [], [0xc1]}) 19:51:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000300)=0x1d, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x0, 0x80000001, 0x1, 0xe5}, {0x1, 0x4, 0x6, 0x6}, {0xdd16, 0x2, 0x100, 0x3}, {0x4, 0x0, 0xff, 0x4c8e834c}, {0x1, 0x7, 0x1, 0x21}, {0x400000000000, 0x579, 0x8001, 0x126afab}, {0xfffffffffffffffd, 0xfff, 0x7fffffff, 0x9f}]}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2100, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02fe27bd70a0c13eec5599e5cc46bf04fb0100fddb00000000000000001759f0a0c113d19275bc306f819c3584185dadb6fe551322b80cda0d420d90665de8bd75a41e6700b6191aa0bb93d642785bfce79320f674aa31ad8f12a4eebf2ac9db6261e86f38256c7edff2c41e75ea241a23478c5db1c0f1ef5cb5a176a6fccbde08ac479d949b533330e116e6c5bb812e17ee6b8873e1f25df7549cf8ffffff9761c7a0197d367581fdcef4d5d16fe65aa3f11b532b3ab9ea3369000000000000000002d3af87b21616ab115c29bf87e10b01a0be97549a813ebcb55e0439c35757f0a0f964c11978f084ff7b5e700a18d47ec1414ab54041960a503ddd5f54a0aa61832431706ea0841b7d0d9fcd0149987e7d5b660f08e20a321e803e1373b7ccae1fa1e6d951268bc39a187ac7a9caf918c2aa8266d7439d6ba646af8eb94c86b05cae4252c46024ba9d430ae25eea90b3eb353b7852af8df686b896ecb1ce3ab55654f7b1260dd133b0e91e5be7"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x9) r5 = syz_open_procfs(r4, &(0x7f0000000640)='task\x00a/\x86\'Ph\x06*i]3\xb0\xef@q\x04L\xa0\xd4K\xd1\x03|\xdds\xbc\xe9\xc5 G`\x80R\xd2\xbe\xee\x14\xe6\"\xf5\xc9\x9fn8I\x9bI8\xc4`\xfbkD\xf3\r\xe7\xf9\xfe\x85\xfcN\xe4\xb4\xaa\xae\xdf\xddS\xd3\x8b{\xc5^\xcb\xe7\'fz1\xd4\x17,b\x7fY\xc4\xd0\\m\xe2d\x17rv\xe2\x04-\xeb\x19B\xf2\xdb\xc7\xb2\xe0\xc3}w\x95X\x12\xe3u\xc6G\xfc\xeaZ\xd1\xabH\x06G>\n\xb2*\xd7#\xa5E`T\xef\x97-\x9f\x99\xd3\x90&\x12uj\x12\x04DM!\x1c\xc0\xc8\xf62\x85\xe5q\b;SH\"O6-2\xcd\x85\xfc:\x88\x123\xfc\r\xf2\x1b\xb3\xc2d::O\xc2\x10\xb4*]\xf5\x05\x81\xf0DJ6\x17\x9d\xf82\xd1z\x1e\x00P\xf6\x0f\x9c\xc7\xa1r\x15;\xf5\x81|;\xadMR#n\x94\x13\xe91\xc5\n\xb0r\x93n;:q-\xe5\xcb\xe5,\xd4@\xc4k\x91Em\xe6\xc2\x91\x15W\x89\xfdh\x12\xccZt;\x9d}\x16u\x9c\x8e\x0282\x9d:r\xc4b\xccB\xf7{\x1c%2\xec\\p)\xeaT') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1, 0x1000000000400ffa) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000180)=""/204) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil) r6 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 19:51:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 19:51:46 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe00b1a83c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3b3eac5ba32e27a8ac341db4d1225e3f53fac8466d8e42bf187cb70b20559d92c0a1550339c04bc87a97afbd9f51612ba3933888d16b5700bc05b7ddf71eb2194a64ae455eea7e817714323a4af11859d84a01187734d10fc66"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x82000120, {0x77359400}, {0x5, 0xc, 0xf3, 0x7, 0x6, 0xdd, '&>HJ'}, 0x0, 0x0, @offset, 0x4}) 19:51:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x1}}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000004}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 19:51:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 19:51:47 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev}]}}}]}, 0x48}}, 0x0) 19:51:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018004081700d1bd", 0x2e}], 0x1}, 0x0) 19:51:47 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) [ 1515.053725][ T7434] usb 5-1: new high-speed USB device number 28 using dummy_hcd 19:51:47 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x2, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", [[0x1000000]]}, 0x682) 19:51:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000300)=0x1d, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x0, 0x80000001, 0x1, 0xe5}, {0x1, 0x4, 0x6, 0x6}, {0xdd16, 0x2, 0x100, 0x3}, {0x4, 0x0, 0xff, 0x4c8e834c}, {0x1, 0x7, 0x1, 0x21}, {0x400000000000, 0x579, 0x8001, 0x126afab}, {0xfffffffffffffffd, 0xfff, 0x7fffffff, 0x9f}]}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2100, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02fe27bd70a0c13eec5599e5cc46bf04fb0100fddb00000000000000001759f0a0c113d19275bc306f819c3584185dadb6fe551322b80cda0d420d90665de8bd75a41e6700b6191aa0bb93d642785bfce79320f674aa31ad8f12a4eebf2ac9db6261e86f38256c7edff2c41e75ea241a23478c5db1c0f1ef5cb5a176a6fccbde08ac479d949b533330e116e6c5bb812e17ee6b8873e1f25df7549cf8ffffff9761c7a0197d367581fdcef4d5d16fe65aa3f11b532b3ab9ea3369000000000000000002d3af87b21616ab115c29bf87e10b01a0be97549a813ebcb55e0439c35757f0a0f964c11978f084ff7b5e700a18d47ec1414ab54041960a503ddd5f54a0aa61832431706ea0841b7d0d9fcd0149987e7d5b660f08e20a321e803e1373b7ccae1fa1e6d951268bc39a187ac7a9caf918c2aa8266d7439d6ba646af8eb94c86b05cae4252c46024ba9d430ae25eea90b3eb353b7852af8df686b896ecb1ce3ab55654f7b1260dd133b0e91e5be7"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x9) r5 = syz_open_procfs(r4, &(0x7f0000000640)='task\x00a/\x86\'Ph\x06*i]3\xb0\xef@q\x04L\xa0\xd4K\xd1\x03|\xdds\xbc\xe9\xc5 G`\x80R\xd2\xbe\xee\x14\xe6\"\xf5\xc9\x9fn8I\x9bI8\xc4`\xfbkD\xf3\r\xe7\xf9\xfe\x85\xfcN\xe4\xb4\xaa\xae\xdf\xddS\xd3\x8b{\xc5^\xcb\xe7\'fz1\xd4\x17,b\x7fY\xc4\xd0\\m\xe2d\x17rv\xe2\x04-\xeb\x19B\xf2\xdb\xc7\xb2\xe0\xc3}w\x95X\x12\xe3u\xc6G\xfc\xeaZ\xd1\xabH\x06G>\n\xb2*\xd7#\xa5E`T\xef\x97-\x9f\x99\xd3\x90&\x12uj\x12\x04DM!\x1c\xc0\xc8\xf62\x85\xe5q\b;SH\"O6-2\xcd\x85\xfc:\x88\x123\xfc\r\xf2\x1b\xb3\xc2d::O\xc2\x10\xb4*]\xf5\x05\x81\xf0DJ6\x17\x9d\xf82\xd1z\x1e\x00P\xf6\x0f\x9c\xc7\xa1r\x15;\xf5\x81|;\xadMR#n\x94\x13\xe91\xc5\n\xb0r\x93n;:q-\xe5\xcb\xe5,\xd4@\xc4k\x91Em\xe6\xc2\x91\x15W\x89\xfdh\x12\xccZt;\x9d}\x16u\x9c\x8e\x0282\x9d:r\xc4b\xccB\xf7{\x1c%2\xec\\p)\xeaT') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1, 0x1000000000400ffa) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000180)=""/204) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil) r6 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) [ 1515.305281][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1515.311606][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1515.319522][ T7434] usb 5-1: Using ep0 maxpacket: 8 19:51:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x5, 0x5, 0x8000000001}, 0x3c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 1515.443623][ T7434] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.454164][ T7434] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.465474][ T7434] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1515.474704][ T7434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 19:51:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000500)="c5", 0x1}, {&(0x7f0000000080)='8', 0x100000}], 0x2) 19:51:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x5, 0x5, 0x8000000001}, 0x3c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 1515.652996][ T7434] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 1515.845478][T12776] usb 5-1: USB disconnect, device number 28 19:51:48 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe00b1a83c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3b3eac5ba32e27a8ac341db4d1225e3f53fac8466d8e42bf187cb70b20559d92c0a1550339c04bc87a97afbd9f51612ba3933888d16b5700bc05b7ddf71eb2194a64ae455eea7e817714323a4af11859d84a01187734d10fc66"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x82000120, {0x77359400}, {0x5, 0xc, 0xf3, 0x7, 0x6, 0xdd, '&>HJ'}, 0x0, 0x0, @offset, 0x4}) 19:51:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000300)=0x1d, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x0, 0x80000001, 0x1, 0xe5}, {0x1, 0x4, 0x6, 0x6}, {0xdd16, 0x2, 0x100, 0x3}, {0x4, 0x0, 0xff, 0x4c8e834c}, {0x1, 0x7, 0x1, 0x21}, {0x400000000000, 0x579, 0x8001, 0x126afab}, {0xfffffffffffffffd, 0xfff, 0x7fffffff, 0x9f}]}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2100, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x9) r5 = syz_open_procfs(r4, &(0x7f0000000640)='task\x00a/\x86\'Ph\x06*i]3\xb0\xef@q\x04L\xa0\xd4K\xd1\x03|\xdds\xbc\xe9\xc5 G`\x80R\xd2\xbe\xee\x14\xe6\"\xf5\xc9\x9fn8I\x9bI8\xc4`\xfbkD\xf3\r\xe7\xf9\xfe\x85\xfcN\xe4\xb4\xaa\xae\xdf\xddS\xd3\x8b{\xc5^\xcb\xe7\'fz1\xd4\x17,b\x7fY\xc4\xd0\\m\xe2d\x17rv\xe2\x04-\xeb\x19B\xf2\xdb\xc7\xb2\xe0\xc3}w\x95X\x12\xe3u\xc6G\xfc\xeaZ\xd1\xabH\x06G>\n\xb2*\xd7#\xa5E`T\xef\x97-\x9f\x99\xd3\x90&\x12uj\x12\x04DM!\x1c\xc0\xc8\xf62\x85\xe5q\b;SH\"O6-2\xcd\x85\xfc:\x88\x123\xfc\r\xf2\x1b\xb3\xc2d::O\xc2\x10\xb4*]\xf5\x05\x81\xf0DJ6\x17\x9d\xf82\xd1z\x1e\x00P\xf6\x0f\x9c\xc7\xa1r\x15;\xf5\x81|;\xadMR#n\x94\x13\xe91\xc5\n\xb0r\x93n;:q-\xe5\xcb\xe5,\xd4@\xc4k\x91Em\xe6\xc2\x91\x15W\x89\xfdh\x12\xccZt;\x9d}\x16u\x9c\x8e\x0282\x9d:r\xc4b\xccB\xf7{\x1c%2\xec\\p)\xeaT') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1, 0x1000000000400ffa) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000180)=""/204) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil) r6 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 19:51:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\np\xb4\xd6)\xf5\x1a\x00', 0x0, 0x0, [], [0x2, 0x1, 0xfffffffffffffffe]}) 19:51:48 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x400000001) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x20) 19:51:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x5, 0x5, 0x8000000001}, 0x3c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) 19:51:48 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:51:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 19:51:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x5, 0x5, 0x8000000001}, 0x3c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) 19:51:48 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) 19:51:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000024001505000000408003000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000002500070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000280008001c000100000000000000000000000000000000000000000002000000080002000000000032d3fc0c9300a6a5b790ae0d8dbf095ba0496f34165c2ed11dbf61345ffd2f93f7937307f0f7e236d60f22d6e3b341fc8722137427e5d9fa6d2f765fe91fbcdd9e3eb3457075b75184ff51119cdf900fd6ce1363e76374b969e0e0a83e61a81ccff2f5bc36e592ce7ce23e64579eb3f60b1578517fe0f7b06adb5f1a55c2dcf3505774814357"], 0x4c}}, 0x0) [ 1516.753657][ T7434] usb 5-1: new high-speed USB device number 29 using dummy_hcd 19:51:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 19:51:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0xcf, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000580)={0x7, @output}) [ 1516.993642][ T7434] usb 5-1: Using ep0 maxpacket: 8 [ 1517.135781][ T7434] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.146358][ T7434] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.157795][ T7434] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1517.167069][ T7434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.269983][ T7434] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 1517.500027][T28657] usb 5-1: USB disconnect, device number 29 19:51:50 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe00b1a83c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3b3eac5ba32e27a8ac341db4d1225e3f53fac8466d8e42bf187cb70b20559d92c0a1550339c04bc87a97afbd9f51612ba3933888d16b5700bc05b7ddf71eb2194a64ae455eea7e817714323a4af11859d84a01187734d10fc66"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x82000120, {0x77359400}, {0x5, 0xc, 0xf3, 0x7, 0x6, 0xdd, '&>HJ'}, 0x0, 0x0, @offset, 0x4}) 19:51:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 19:51:50 executing program 1: syz_emit_ethernet(0x574, &(0x7f0000000080)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x566, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 19:51:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000008540)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x10085}) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 19:51:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000011c0), 0x0}, 0x20) 19:51:50 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) 19:51:50 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='./file0\x00') 19:51:50 executing program 0: unshare(0x400) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @initdev}}, 0x72) [ 1518.116883][T13583] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1518.156811][T13583] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 19:51:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) [ 1518.291608][T13583] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 19:51:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000014, @ipv4=@multicast1=0x4000a03}]}]}, 0x24}}, 0x0) 19:51:50 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) [ 1518.414557][ T7434] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1518.465703][T13583] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 19:51:50 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') [ 1518.512827][T13603] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1518.654031][ T7434] usb 5-1: Using ep0 maxpacket: 8 [ 1518.774125][ T7434] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.784778][ T7434] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.796115][ T7434] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1518.805391][ T7434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.871592][ T7434] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 1519.073110][T28611] usb 5-1: USB disconnect, device number 30 19:51:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 19:51:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x5, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:51:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x8, @sliced}) 19:51:51 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) 19:51:51 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r1 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbb1) [ 1519.760020][T13624] picdev_read: 6 callbacks suppressed [ 1519.760035][T13624] kvm: pic: non byte read [ 1519.787809][T13624] kvm: pic: non byte read [ 1519.797795][T13624] kvm: pic: single mode not supported [ 1519.800851][T13624] kvm: pic: single mode not supported [ 1519.801227][ T31] audit: type=1804 audit(1571601111.847:45): pid=13631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/1113/file0/bus" dev="ramfs" ino=187953 res=1 [ 1519.827847][T13624] kvm: pic: non byte read 19:51:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2018f59e6fc82dd8"}}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x400000000000092, 0x10162, 0x0) [ 1519.860578][T13624] kvm: pic: non byte read [ 1519.891995][T13624] kvm: pic: non byte read [ 1519.902989][T13624] kvm: pic: non byte read [ 1519.927788][T13624] kvm: pic: non byte read 19:51:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0) [ 1519.961937][T13624] kvm: pic: non byte read [ 1520.007960][T13624] kvm: pic: non byte read [ 1520.041023][T13624] kvm: pic: single mode not supported [ 1520.041174][T13624] kvm: pic: level sensitive irq not supported [ 1520.052445][T13624] kvm: pic: single mode not supported [ 1520.082919][T13624] kvm: pic: single mode not supported [ 1520.109137][T13624] kvm: pic: non byte read 19:51:52 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e00009112daf870cbe61eaa3fafc9260e05da9c000000"], 0x18}}, 0x0) [ 1520.145949][T13624] kvm: pic: level sensitive irq not supported [ 1520.152664][T13624] kvm: pic: single mode not supported 19:51:52 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r2, 0x0) [ 1520.180684][T13624] kvm: pic: level sensitive irq not supported [ 1520.207856][T13624] kvm: pic: level sensitive irq not supported [ 1520.225052][T13624] kvm: pic: single mode not supported [ 1520.231185][T13624] kvm: pic: level sensitive irq not supported [ 1520.306504][T13624] kvm: pic: level sensitive irq not supported [ 1520.348805][T13624] kvm: pic: level sensitive irq not supported [ 1520.365683][T13624] kvm: pic: level sensitive irq not supported [ 1520.388143][T13624] kvm: pic: single mode not supported 19:51:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYBLOB="f0234b642c11d844d48e00e5c845f33e5d0aa860a26009f941ddefb1aa62ca1db9215c24ec679c03160c76d4d67eb12f6c994118cd365103c5f401c45be44a55a8c2756161ed57fad0d524db954f872556eb3ad8045eb5ca3f52178e3e400fcc2f0feb48180776dea8011b842c1a1c7fa6", @ANYRESOCT, @ANYBLOB="8a75c9f2364aca80fa7c6e030207b051506b33445acf995b193c432c3e4aa772f39ecaadeef86ca9225f8f60d95bd0c7044b43ca1360a49560f6446963c600a7dd722c9eb498d7fa81e2217ff0bf3d64ec8f"], 0xf1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x277) 19:51:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000000)="240000005a001f030000000700ac5fbfc7b5640904000200ff100c0004003adc22965511", 0x24) [ 1520.394522][T13624] kvm: pic: level sensitive irq not supported [ 1520.600730][T13859] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1520.672397][T13860] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1520.743847][ C1] net_ratelimit: 27 callbacks suppressed [ 1520.743869][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1520.755904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1520.824043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1520.830372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1520.837040][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1520.843437][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1520.849943][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1520.856340][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1521.019652][T13624] kvm: pic: single mode not supported [ 1521.020075][T13624] kvm: pic: single mode not supported [ 1521.543918][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1521.555528][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:51:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) 19:51:54 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) 19:51:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26234d0400160008001e000800009272f07dc728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) 19:51:54 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) 19:51:54 executing program 5: r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f00000000c0)="6e7c6d6c4d4adcc588"}}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) write$sndseq(r0, &(0x7f0000000080), 0x67e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800) 19:51:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000700)=0x90) [ 1522.608996][T13973] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.4'. 19:51:54 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) 19:51:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00001e3000)=""/29, &(0x7f0000000000)=0x1d) 19:51:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r3) 19:51:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') lseek(r1, 0x142d, 0x0) 19:51:55 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) 19:51:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:51:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r3) 19:51:55 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) 19:51:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r3) 19:51:55 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffdca, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001e000502ed0080648c6394f20531d20005000f4009000000000000000000009700d0bdff0f0000000000", 0xfdc6}], 0x1}, 0x0) 19:51:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xa, 0x800, 0x3}, 0x2c) unshare(0x400) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000340)=r0, 0x4) 19:51:55 executing program 2: clone(0x140009000, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:51:55 executing program 1: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:51:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190009004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x48}], 0x1) 19:51:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x400}) 19:51:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), 0x4) 19:51:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r3) [ 1523.924793][T14336] IPVS: ftp: loaded support on port[0] = 21 19:51:56 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x3, 0x0, 0x0) 19:51:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150081f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) 19:51:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0f000, 0x0, "225a4374327cada684f6caa230f674e75e201c0100"}) 19:51:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r0, 0x80047441, &(0x7f0000d1df52)=""/174) 19:51:56 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x27a, 0x0) r1 = dup2(r0, r0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)='Z', 0xfffffe67}], 0x1, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28}, 0x28) read$FUSE(r1, &(0x7f00000003c0), 0x1000) 19:51:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x7325, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc)) [ 1524.436644][T14336] IPVS: ftp: loaded support on port[0] = 21 19:51:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {}, {0x0, 0xf005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff7}}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 19:51:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11dca5") ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:57 executing program 3: unshare(0x20400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) getsockname$packet(r0, 0x0, 0x0) 19:51:57 executing program 2: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:51:57 executing program 5: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0xffffff94}, {0x0, 0xfdfdffff}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:51:57 executing program 1: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:51:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x8000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:51:58 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1300, &(0x7f00000017c0), 0xfffa) 19:51:58 executing program 0: unshare(0x600) r0 = socket(0x40000000015, 0x805, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 19:51:58 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ac00002c000500cf182897f09730af000500000000000000ffc54c1960dbb7d58259483533a055a653b4a421556b3d5df500", 0x39}], 0x1}, 0x0) 19:51:58 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) pipe(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 19:51:58 executing program 4: unshare(0x8000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) bind$netlink(r1, 0x0, 0x0) 19:51:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x3}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) 19:51:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000007c0)={0x5}) 19:51:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf9d22168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918aef0da5352e6358c8735e799a9f9df2685a80cd8952c05b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f9", 0xe3}], 0x4, 0x0) poll(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffb7, 0x0, 0x0, 0x0, 0x36}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:51:58 executing program 2: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:51:58 executing program 1: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:51:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000001c0)="f082b6000044260f2154b8ab0f8ee866b9800000c00f326635000800000f300f01c20fb26c00f40f686e0a670fc775f90f12e5"}], 0x1, 0x0, 0x0, 0xfffffffffffffcc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1526.280229][T14623] ptrace attach of "/root/syz-executor.5"[13181] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ   @ ="[1 [ 1526.983818][ C1] net_ratelimit: 27 callbacks suppressed [ 1526.983840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.083269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1527.089792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.096226][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1527.102695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.109122][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1527.115759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.122012][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1527.783938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.790437][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffd4, 0xa, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 19:52:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = getpid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000015) shutdown(r2, 0x2) 19:52:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.low\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xb) 19:52:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2a400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r2, r0, 0x0) dup2(r0, r1) 19:52:00 executing program 2: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:52:00 executing program 1: mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x71) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000000640), 0xffffffef) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, ':vmnet0'}}, 0x25) 19:52:00 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x810c5701, &(0x7f0000000140)={0x0, 0x0, 0xffff}) 19:52:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffff00000000}}, 0x20) 19:52:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0045401, &(0x7f0000000000)) 19:52:00 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0000810000007c00bbf5766990113cf2d2b243ba50706eaf555c9189d7ebe07567ac0d5e0ba4968976ff071fabb92afc4a2a2e4b5e5b35401900ca12c1064fc796620d766852a7707ca1ec77a31ffbe49b254ee967450894bcc2b71e8e4a96c4e65ddbedb915042ced3828121ed18d4570c6c86baa6615fbae180f36c1"], 0x0}, 0x0) 19:52:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) 19:52:01 executing program 4: mmap(&(0x7f0000197000/0x10000)=nil, 0x7fffdfe68000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 19:52:01 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x6, 0x0, 0x4) [ 1529.283379][T28611] usb 6-1: new high-speed USB device number 105 using dummy_hcd 19:52:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) 19:52:01 executing program 0: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x8) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1529.533320][T28611] usb 6-1: Using ep0 maxpacket: 16 19:52:01 executing program 3: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) 19:52:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) io_setup(0x4, &(0x7f0000000500)) [ 1529.673553][T28611] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1529.681854][T28611] usb 6-1: config 0 has no interface number 0 [ 1529.688403][T28611] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1529.697668][T28611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:52:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 19:52:01 executing program 0: syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000043d2e740085d2c1300000000000109022b000100000000090480000130021c00090400000000000000080b63eb71f17571080b7e037def49aedf2728"], 0x0) [ 1529.837949][T28611] usb 6-1: config 0 descriptor?? 19:52:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x4, {0x1000000000000001, @raw_data="883d24b91e57e886fca466088baf5f344209b2ad8ff2fc646b40af17a5d6edc8b93b458ee535075ab6255500490203eeaf583bc7a60e265aabd7e9ecf30a465123c224323d7b491b3766360dc1b9bd5fe8f1de70928c443c0db7e303df5f9bb3e419088730b48f7fea5cf3ecae85e2191e973262f5b50eb5cc802f9abd23442b2dc48bd1aedeb8c94f012b8e1cab645f9797e4ba66c8b015291899a8e028010013acc1d1425afd2c36bdf7846a0f4e9b5817031598f56733e9190211c7f7213d3e1efa442647df93"}}) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0x1) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) 19:52:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) io_setup(0x4, &(0x7f0000000500)) [ 1530.115745][T28611] gtco 6-1:0.219: Collection level already at zero [ 1530.122359][T28611] gtco 6-1:0.219: Collection level already at zero [ 1530.130792][T28611] input: GTCO_CalComp as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.219/input/input212 [ 1530.141659][T28657] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1530.328497][T28611] usb 6-1: USB disconnect, device number 105 [ 1530.375179][T28611] gtco 6-1:0.219: gtco driver disconnected [ 1530.523453][T28657] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1530.531916][T28657] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1530.541175][T28657] usb 1-1: config 0 has no interface number 1 [ 1530.547553][T28657] usb 1-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1530.561028][T28657] usb 1-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00 [ 1530.570284][T28657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.580405][T28657] usb 1-1: config 0 descriptor?? [ 1530.585672][T28657] usb 1-1: Interface #128 referenced by multiple IADs [ 1530.827473][ T7434] usb 1-1: USB disconnect, device number 122 [ 1531.103315][T12776] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1531.343706][T12776] usb 6-1: Using ep0 maxpacket: 16 [ 1531.463568][T12776] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1531.472258][T12776] usb 6-1: config 0 has no interface number 0 [ 1531.478760][T12776] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1531.488119][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.497750][T12776] usb 6-1: config 0 descriptor?? [ 1531.603720][T28657] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1531.803715][T12776] gtco 6-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 1531.811977][T12776] gtco: probe of 6-1:0.219 failed with error -5 [ 1531.822826][T12776] usb 6-1: USB disconnect, device number 106 [ 1531.963518][T28657] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1531.971925][T28657] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1531.981401][T28657] usb 1-1: config 0 has no interface number 1 [ 1531.987799][T28657] usb 1-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1532.001082][T28657] usb 1-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00 19:52:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) 19:52:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d80)="4b4323ce1aaf39", 0x7}, {&(0x7f00000014c0)="5ae08d2b99ab182645c710e00e47d54bff17badf198bf08ae107", 0x1a}], 0x2}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002540)="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", 0x796}], 0x1}}], 0x2, 0x0) [ 1532.010373][T28657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.020558][T28657] usb 1-1: config 0 descriptor?? [ 1532.025987][T28657] usb 1-1: Interface #128 referenced by multiple IADs 19:52:04 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x2) 19:52:04 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) io_setup(0x4, &(0x7f0000000500)) 19:52:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x12, 0x43, 0x109}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:52:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x80045440, 0x719000) 19:52:04 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) io_setup(0x4, &(0x7f0000000500)) 19:52:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000b80)={0x58f, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x2, 0x1a0}}]}) [ 1532.275622][T28657] usb 1-1: USB disconnect, device number 123 19:52:04 executing program 1: get_mempolicy(0x0, &(0x7f0000000080), 0x81, &(0x7f0000ffd000/0x1000)=nil, 0x0) 19:52:04 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x1c, 0x0, [], "5c8265d71911e42995515126854df89c3e861a2a"}}}}}, 0x0) 19:52:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x268b0d2dc0476662, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext={0x6}, 0x10, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='wls\x00\x00\x00\x00\x00\x00', r3}, 0x10) recvmsg(r4, 0x0, 0x40000000) close(r1) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) syz_open_procfs(r5, &(0x7f0000000740)='io\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000001a80)=0x9d7fafea082bd9aa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], r6, 0x1d, r3, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffd08) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x12}, 0x14) r7 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) r9 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080), 0x301) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffff8c) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_score\x00') preadv(r10, &(0x7f00000017c0), 0x351, 0x0) pipe(&(0x7f0000000340)) r11 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_score\x00') preadv(r11, &(0x7f00000017c0), 0x351, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_score\x00') preadv(r12, &(0x7f00000017c0), 0x351, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='oom_score\x00') r13 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r13, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}, 0xfec0) 19:52:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 19:52:04 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x142, 0x0, 0x0, 0x3}}, 0x68) 19:52:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0xff}]}, &(0x7f0000000280)=0x10) listen(r1, 0x40000007) accept4(r1, 0x0, 0x0, 0x0) [ 1532.868059][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:52:05 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x142, 0x0, 0x0, 0x3}}, 0x68) [ 1533.303817][ C1] net_ratelimit: 26 callbacks suppressed [ 1533.303841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.316293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1533.322890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.329471][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1533.336137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.342451][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:52:05 executing program 0: semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x8, 0x10) [ 1533.349159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.355586][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:52:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x12, 0x43, 0x109}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:52:05 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x142, 0x0, 0x0, 0x3}}, 0x68) 19:52:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x8}]}, 0x28}}, 0x0) 19:52:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 19:52:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@local, @multicast1}, 0x8) 19:52:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0xff}]}, &(0x7f0000000280)=0x10) listen(r1, 0x40000007) accept4(r1, 0x0, 0x0, 0x0) [ 1533.864313][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1533.981416][T15522] netlink: 'syz-executor.5': attribute type 21 has an invalid length. 19:52:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x800000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a3d}}}}, 0xa0) [ 1534.023885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1534.030209][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:06 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x142, 0x0, 0x0, 0x3}}, 0x68) 19:52:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1dc}]}) [ 1534.125614][T15532] CUSE: zero length info key specified 19:52:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@local, @multicast1}, 0x8) 19:52:06 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000080)) 19:52:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") socket(0x40000000015, 0x805, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x20200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r4, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1a4, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @ipv4={[], [], @remote}, 0x890}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10001, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x14050}, 0x20000480) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r5, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r8, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1a4, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @ipv4={[], [], @remote}, 0x890}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10001, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x14050}, 0x20000480) 19:52:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}}}, 0xb8}}, 0x0) 19:52:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x12, 0x43, 0x109}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:52:07 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='comm\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) 19:52:07 executing program 2: syz_emit_ethernet(0x1272, &(0x7f00000005c0)={@broadcast=[0xff, 0xe0], @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "f4731b", 0x123c, 0x0, 0x0, @remote, @dev, {[@routing={0x7f, 0x6, 0x1, 0x3, 0x0, [@mcast1, @mcast2, @loopback]}, @srh={0x3c, 0x4, 0x4, 0x2, 0x3ff, 0x20, 0x1f, [@mcast1, @empty]}], @gre={{0x0, 0x0, 0x1, 0x8001, 0x0, 0x31, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x6], "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"}, {0xffffffff, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x800, [], "3d0e193c24dcd9429883ad56038cd9d4b5d77d6eb0564d4fe83626a0cb1983341cafe7ea79406111dc1d9f8c7e913347b4c8b0fe73b007c37a34c28b983f99107c61d75caf66be90f287055c2a390ffac64cd2df3f949723508b22c5e64cbce7ecb66156e1ea9b5408b394495de22454b3d00daf7593ac62abc72aadf662e123"}, {0xfff, 0x0, 0x9, 0x1, 0x0, 0x0, 0x86dd, [0x5], "ab7a67fb9b01400abdaab6825e06f8ef7644544ba73800de16620eeca881778e3df2ef4dfc1a4e37629fa49fd54966aac6b5e1470c1985e4d7d01b4b429e8c832f1597631c681100b96247bd3f2b3c60378ad3821d6579400ef1a6755598b10621735bc67c9359b6c1b46d8dcdb5f28a84d1021c8f4e8b7d2f01b9624fd32eac8d63bba3d86fed9c23b0352d"}, {0x8, 0x88be, 0x2, {{0x5, 0x1, 0xffffffffffffffbc, 0x3f, 0x7, 0x40, 0x9, 0x5}, 0x1, 0x81}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x37dfcbd4, 0xffffffff, 0x19f, 0x8, 0x4, 0x8}, 0x2, 0x7, 0x8, 0x7fff, 0x2, 0xfffffffffffffffa, 0x40, 0x8, 0x7fffffff, 0x81}}, {0x8, 0x6558, 0x0, "1f64039ca423c3a48de1c4bd20320cb49dec21626da2564467418b94a9755d935f9cea4b510b285ce2a822f5d6078b5abdbb163bf73deeefe20b366b6521fcfbe7539cf2e1d4cdf26f30488f3a3b7ff64b5e35afb6217be8a57849cb02ede2804e2de406433cff564536e989bf39824ba204f0372919f13f38a079f50f3ac358b4489caf0587c40c"}}}}}}}, 0x0) 19:52:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@local, @multicast1}, 0x8) 19:52:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0xff}]}, &(0x7f0000000280)=0x10) listen(r1, 0x40000007) accept4(r1, 0x0, 0x0, 0x0) 19:52:07 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x107}, {0x10}], 0x20}}], 0x2, 0x0) 19:52:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@local, @multicast1}, 0x8) 19:52:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r1, r2, 0x0, 0x320c) 19:52:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901ff007259bca88e48"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xe8ca], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000440)=0x8f, 0x4) [ 1535.579315][T15791] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:52:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r1, r2, 0x0, 0x320c) 19:52:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x80f, 0x7ffffe, 0x0, &(0x7f0000ffa000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 19:52:08 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x12, 0x43, 0x109}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:52:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r1, r2, 0x0, 0x320c) 19:52:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x40096102, 0x70e000) 19:52:08 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000017000)=0xfffff7fffffffffb, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2=0xac141400}, 0x10) 19:52:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0xff}]}, &(0x7f0000000280)=0x10) listen(r1, 0x40000007) accept4(r1, 0x0, 0x0, 0x0) 19:52:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xffffffffffffff3f) [ 1536.368995][T15925] QAT: failed to copy from user cfg_data. [ 1536.426277][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! 19:52:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000400)=""/217, 0xd9}], 0x2, 0x0) 19:52:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r1, r2, 0x0, 0x320c) 19:52:08 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) unlink(&(0x7f0000000300)='./file0\x00') 19:52:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xffffffffffffff3f) 19:52:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150002008178a80016000f000200e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 19:52:08 executing program 3: mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa000, 0x3, &(0x7f0000ff3000/0xa000)=nil) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 1536.988739][T16058] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:52:09 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f00000002c0)=[{0xffffff81, 0x8, 0x0, 0x0, @tick, {}, {}, @raw8={"6cb155b736f8653747ce5b05"}}], 0x30) 19:52:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xffffffffffffff3f) 19:52:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0xb}, 0x20) 19:52:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000000)=""/143, 0x8f) 19:52:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000100)=0xfd, 0x4) 19:52:09 executing program 0: socket$tipc(0x1e, 0x4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) unshare(0x20020400) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 19:52:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x4, &(0x7f0000000000)='dirsync\x02', 0x400000, 0xffffff9c) dup3(r0, r1, 0x0) 19:52:09 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 19:52:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:52:09 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc04c5349, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:52:09 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 19:52:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xffffffffffffff3f) 19:52:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 1537.704966][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 19:52:10 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif(_\xaa\xdf\x00'}}) 19:52:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @empty}, 0x8) 19:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x90a, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x25}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:52:10 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x89, 0x3, 'E'}, @lsrr={0x83, 0x3, 0x20}]}}, @igmp={0x0, 0x0, 0x0, @local}}}}}, 0x0) 19:52:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0xffffffad, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000020028080008000400e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 19:52:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:10 executing program 5: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) [ 1538.339137][T16117] could not allocate digest TFM handle crct10dif(_ªß [ 1538.406944][T16117] could not allocate digest TFM handle crct10dif(_ªß [ 1538.431420][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:52:11 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) read(r0, &(0x7f0000000180)=""/121, 0x192) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x4001000000000014) r2 = gettid() tkill(r2, 0x4001000000000014) 19:52:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200), 0x8) 19:52:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 19:52:11 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x1) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000140)=0x9) 19:52:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b3fdc)) write(r2, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}) 19:52:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x9, @pix={0x0, 0x0, 0x3132564e}}) 19:52:11 executing program 4: r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='lazytime\x00', 0x0, 0x1a0) 19:52:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 19:52:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x80001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:52:11 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x6000000000000003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:52:11 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = dup2(r1, r1) dup2(r2, r0) 19:52:11 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYPTR, @ANYPTR, @ANYRES64], 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) [ 1539.543763][ C1] net_ratelimit: 26 callbacks suppressed [ 1539.543785][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.555903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.562341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.568761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.575401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.581642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.588259][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.594622][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:52:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) read(r0, &(0x7f0000000180)=""/121, 0x192) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x4001000000000014) r2 = gettid() tkill(r2, 0x4001000000000014) 19:52:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x6000000000000003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:52:12 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000074000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x3, 0xc000, 0x8000fff5) 19:52:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000007ff1abbefe70597824c2e0a0000000c0001400800000565efff010c000200050022ff02f10000"], 0x2c}}, 0x0) 19:52:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xe, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 19:52:12 executing program 2: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe3, 0x0, &(0x7f0000000000)) 19:52:12 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 19:52:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f03d0fb0a0002000300000000000f00060005000606", 0x2e}], 0x1}, 0x0) 19:52:12 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x8001}]}) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) syz_open_dev$dspn(0x0, 0x0, 0x0) 19:52:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x6000000000000003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1540.263860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1540.270255][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) read(r0, &(0x7f0000000180)=""/121, 0x192) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x4001000000000014) r2 = gettid() tkill(r2, 0x4001000000000014) 19:52:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:52:12 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) 19:52:12 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) 19:52:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x6000000000000003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:52:12 executing program 4: unshare(0x20400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setrlimit(0x7, &(0x7f0000000000)) accept4$unix(r0, 0x0, &(0x7f0000000b00), 0x0) [ 1540.668215][T16690] sctp: [Deprecated]: syz-executor.0 (pid 16690) Use of int in max_burst socket option deprecated. [ 1540.668215][T16690] Use struct sctp_assoc_value instead 19:52:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {0x0}, {&(0x7f0000000400)=""/155, 0xfffffffffffffe30}, {0x0}, {&(0x7f00000004c0)=""/102, 0x66}], 0x1000000000000290, 0x0) ppoll(&(0x7f0000000140)=[{r0}, {r0}, {}], 0x3, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {0x0, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0xd9, &(0x7f0000000200)=[{&(0x7f0000000380)=""/34, 0x1b}], 0x1000000000000010}}], 0x4000315, 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 19:52:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0xd}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 19:52:13 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) 19:52:13 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) [ 1540.981951][T16782] kvm [16781]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 1541.066858][T16782] kvm [16781]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 1541.090147][T16797] sctp: [Deprecated]: syz-executor.0 (pid 16797) Use of int in max_burst socket option deprecated. [ 1541.090147][T16797] Use struct sctp_assoc_value instead 19:52:13 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000200)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x4f, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0xffffffffffffff23}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0xfee1, "00000000000000000000000001000080"}, @md5sig={0x13, 0x12, "eaaab4d0ceb3a8d98f5d9ffd47fdc19a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 1541.160177][T16782] kvm [16781]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 19:52:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) read(r0, &(0x7f0000000180)=""/121, 0x192) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x4001000000000014) r2 = gettid() tkill(r2, 0x4001000000000014) 19:52:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x180, 0x10, 0x801, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'lrw-cast6-avx\x00'}}}]}, 0x180}}, 0x0) [ 1541.289048][T16832] kvm [16781]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 19:52:13 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) 19:52:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045518, 0x0) 19:52:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="a5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000940)='%', 0x1}], 0x64}}], 0x2, 0x400c004) 19:52:13 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) [ 1541.545041][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! 19:52:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000140)=',]!\x00') [ 1541.596601][T16920] sctp: [Deprecated]: syz-executor.0 (pid 16920) Use of int in max_burst socket option deprecated. [ 1541.596601][T16920] Use struct sctp_assoc_value instead 19:52:13 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0xd4, 0xf4, 0x8, 0x17cc, 0x41c, 0xfa39, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfd, 0x0, 0x0, 0xf1, 0x7d, 0x63}}]}}]}}, 0x0) 19:52:13 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1baea7, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 19:52:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) sendto$inet6(r0, 0x0, 0xffffffffffffff3b, 0x0, 0xfffffffffffffffe, 0x19f) 19:52:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000033001901000000000000000003000000ffd38d9b0c0001000600060008060000ffae0666dd1e9d8fd36869c24ad596fffba573158937dc2dd24a3929c01e54cb16a0c1c42a330314a4850821b5a3b1cae8c19dc730ff896178cad457fdf6787d037f38e23c006470e96e97889c4d6c1406de9869d65996be4f951f6ac7cf261f5f566314b8c274057507a74f10e5580e2d31a08cc6c5244d9d22249344a8ae645f326e76cddc2dc8793d9b5685f85dc3a84c4031a60f3abb839305c596011cc2c68e3a5c6cc2e061b8d5ee36f09f9738367f482428b9f40d"], 0x24}}, 0x0) 19:52:13 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) 19:52:14 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_udp_int(r2, 0x11, 0x9c59fdfaec839e65, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x9, 0x8000) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000e40)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac834562"}, 0x0, 0x0, @offset, 0x4}) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) 19:52:14 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99>oJ\x02u\x9b\x94a\xac\x00\x00\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x0, 0x0, 0x9) [ 1542.023400][T12776] usb 2-1: new high-speed USB device number 88 using dummy_hcd 19:52:14 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="fa00e4188bd513aee7e0ec11dc3c7c6dcf363ecfbbce11582d82f9bf50a3f8b1e5069cd1a39601f26d3c40ba82c7804a67a7e61b0d23b7ebecd6822e886899a790c4f9a1fda410fdfaf01077617637722a18737502c0d0aad11ad94eab899638b97f1d05952ec6498e87907daf4dee1d5f8b5666814ebc51542d83194c776c99b6aab5bb95261d9822c66fbb85d8ebddb725f7f75c10d50b23fe1401679962d5f4ef4384d5a6532ce663dead3644ca2c3428232320a20c7aad0b7590622c242a688b645e5620fc7d771df714c2dd8e2b73899f91327c5b9d0f3c61584e903d5355d21b91ba74df4c712ddfd1cd59b4590f2c08adfee9f02b9e5888c943b7274d6b3e743c208e0be853810e3c35ccd634ef723c7d1d3dec2a833b01969275bd37b0377a1fac6ccfb4e993bd3f7444572cca4f58eb726a4a0287d050307fff8607288e1e82f38cf13a6848d445c4525bda6e6a50eab79d8277a8b6a72916e59620fef5368f8c7a1b1082875ad13429c90109999715a91dc70b54c2d682fae88fe83c272c09c4c1d97ce96fc9a54f3d42d082491f924c2b108ce051b0a0f5afeaa82559a8240c4a34b7c9bfa79757cfcddda0ecc1c1586d11fb95925e90d09817c6e23cc0b43049eb0b85cf1f7d2805bb2312a4d74fc35dedb5978f54bda2db7c8d8c4ee8acc4683617378477f8e050b8d4893b1c2a8330aaac11bdff83c246e60ce2087a3a51e2015a4908e656b35aa714649c18f2dbf35df146616e007073a8afc6fc87eb8d86356039989765ff95519e2b1177ce9460d43c13be3196ed887cc32fdff8d6c9c30c232b3a5e53a55612273743b54aa77b7eb02cd3ca1df2acaa56db5283dbbfca4b695795c78466935366573cc5f15d9ed248937c47ab752ddaaf07a56a3aabab0f3548957c594a7b33f69022423a2d7bacc6526c9d510ee9e5d2947ceb1c375d280b7cf1c911162d2214c098ceaae4dcf505d2a30e5220ed08865dbef257ef1fb6a082250f0dddbfb5775238a24203ed9b403908e96bf5949e71cec7606c75e1f50f7c074bd9958eb834b2834645bd99745a164c85de924325adc3ccc0f1d0d75c900fef6b36c88d731a35062c9bdc5d5dae66bf984982d7850fa0c9fb6e13d770d50f3e7630ddfe9e1c39668db968e923449c9af1e5f53de8a67147a2324374ad4569f28ffef0a2e28cef388cf7bfbaeeaa7cb403a10acda37d65ac80d6d9b263d1313b1000e9c8e099c817d0a018acf5cfa5592b5af924cb049dd25c725d2d53bbdc51bbbbefcc59a4ff5f91dda4f6ad960698c6fc58d0835c85aea536c61eb6150e27b262a369c3533ce466a2bab9d4d1c1241ae0f7ac4d200af7275b2400ed788d2d75427beaee1120f4d39b74b62a0b6359a80af66da7f29e7e416703dd6985af02ad38a8376521baed5aad97866ed5612ca741887f36de8d5aa75290f1513e1abde3ddae5f20c69a858d185ee2d2f2236d803ccedf545557f5bb5de4c769e27e853dc14e3dfb97b47718becb018d086563fb190c5a8c2a6a211252229f005bc91493d235ae1171e18d712662ee20be0369765245d7aec4956a72ddd9c11538b2620ab6fbb1e108197e9e5cc937a4aa33a03b80739277a79550025e264d0d2e673dbe2bef4ac3f61515a0f1d33269667a0de8a9446c908884f7365aa0b01ad8d164eb6c526af7ba9f3bf94cb244cee3e9d944a40f4dbf9ea6c0c0266d06232c6689a881734a13a55dcfe885f9f64981f4d4d8ea6f569af6b78a2e7f4684ec72a1e0b2f3852a633714e1b86ee3b0a3bcf14d53bb228e09f99da60a920ac091ebc62b3dbd6eaa94f7765c058c2f85f723e1281004cab7e67d858cdd7c3715835518337b5efb8456a68dfa38be4a8007a2ea67f03255edafc95f14e48ea0c010090fb03c91a7c58e3faeb066d0eb96f917a74ef225155b5bd53da17f42fdbf7f30ae6f9f3edfb8f2e3cbc1054e3b376f7bf84bac8c8e81c181d114ecb233390cb3e9aad1197f12aeb00d23096a474a92aac95923b468d7f1343db847e3658078d359", 0x5a9}], 0x1, &(0x7f00000009c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x6}, @timestamp={0x44, 0x18, 0x6, 0x0, 0x0, [{}, {[@rand_addr]}, {[@empty]}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x50}, 0x0) [ 1542.081110][T17045] sctp: [Deprecated]: syz-executor.0 (pid 17045) Use of int in max_burst socket option deprecated. [ 1542.081110][T17045] Use struct sctp_assoc_value instead 19:52:14 executing program 0: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x0, 0x4}, 0x10) r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000440)=[{0x0, 0x8001}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x7]) semop(r0, &(0x7f0000000440)=[{}], 0x1f2) 19:52:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) fcntl$setlease(r2, 0x400, 0x0) [ 1542.273377][T12776] usb 2-1: Using ep0 maxpacket: 8 19:52:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000000c0)="2e0000001900d968e65de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) 19:52:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') writev(r0, &(0x7f0000003ac0)=[{&(0x7f0000002300)="ba", 0x1}], 0x1) [ 1542.403708][T12776] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1542.412072][T12776] usb 2-1: config 0 has no interface number 0 [ 1542.418689][T12776] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=fa.39 [ 1542.427881][T12776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.532827][T12776] usb 2-1: config 0 descriptor?? [ 1542.556155][T17170] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1542.579257][T12776] snd-usb-caiaq 2-1:0.253: can't set alt interface. [ 1542.586315][T12776] usb 2-1: unable to init card! (ret=-5) [ 1542.594791][T12776] snd-usb-caiaq: probe of 2-1:0.253 failed with error -5 [ 1542.776393][ T28] usb 2-1: USB disconnect, device number 88 [ 1543.543556][ T28] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1543.783352][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 1543.903348][ T28] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1543.911741][ T28] usb 2-1: config 0 has no interface number 0 [ 1543.918165][ T28] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=fa.39 [ 1543.927342][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.936981][ T28] usb 2-1: config 0 descriptor?? [ 1543.978989][ T28] snd-usb-caiaq 2-1:0.253: can't set alt interface. [ 1543.985989][ T28] usb 2-1: unable to init card! (ret=-5) [ 1543.992177][ T28] snd-usb-caiaq: probe of 2-1:0.253 failed with error -5 [ 1544.175243][T12776] usb 2-1: USB disconnect, device number 89 19:52:16 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008b33ea08eb0302002d4a0000000109021b0001000000000904ba000172775500070581000000000002"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "f019fc8240ebae04001118b80500ff0ed752efa5d82cc18400"}) 19:52:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xffffffffffffffff}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 19:52:16 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xe0, 0x21, 0x68, 0x20, 0x10d2, 0x453e, 0x26ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x0, 0x56, 0xd8, 0x5f}}]}}]}}, 0x0) 19:52:16 executing program 2: r0 = epoll_create(0x143) r1 = epoll_create(0x64c49593) r2 = epoll_create(0x800f61) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x410b24f) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000c7f000)) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f000050aff4)) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000140)) 19:52:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x980001, 0x0, @value}) 19:52:16 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) read$alg(r0, &(0x7f0000000040)=""/158, 0x9e) 19:52:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x980001, 0x0, @value}) 19:52:16 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd, 0x4, 0xf1, 0x40, 0x547, 0x6801, 0x2708, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x67, 0x0, 0x0, 0xb7, 0x32, 0xb4}}]}}]}}, 0x0) 19:52:16 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x91, &(0x7f0000000140), &(0x7f0000000040)=0xc6) 19:52:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x980001, 0x0, @value}) [ 1544.993424][ T28] usb 4-1: new high-speed USB device number 94 using dummy_hcd 19:52:17 executing program 4: syz_usb_connect(0x0, 0x23a, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xe6, 0x81, 0xff, 0x8, 0x1870, 0x1, 0xfbfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xa}}]}}]}}, 0x0) [ 1545.075924][T12776] usb 2-1: new high-speed USB device number 90 using dummy_hcd 19:52:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x980001, 0x0, @value}) [ 1545.233401][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 1545.244234][ T7434] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1545.343375][T12776] usb 2-1: Using ep0 maxpacket: 8 [ 1545.354315][ T28] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1545.362628][ T28] usb 4-1: config 0 has no interface number 0 [ 1545.368947][ T28] usb 4-1: New USB device found, idVendor=10d2, idProduct=453e, bcdDevice=26.ed [ 1545.378305][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.388080][ T28] usb 4-1: config 0 descriptor?? [ 1545.423626][ T2831] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1545.438754][ T28] usblcd 4-1:0.164: USBLCD model not supported. [ 1545.493983][T12776] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1545.502409][T12776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.512844][T12776] usb 2-1: config 0 has no interface number 0 [ 1545.519243][T12776] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1545.528544][T12776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.562589][T12776] usb 2-1: config 0 descriptor?? [ 1545.606618][T12776] Registered IR keymap rc-hauppauge [ 1545.612966][T12776] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1545.626096][T12776] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input214 [ 1545.647638][T12776] usb 4-1: USB disconnect, device number 94 [ 1545.673728][ T7434] usb 3-1: config 0 has an invalid interface number: 103 but max is 0 [ 1545.682095][ T7434] usb 3-1: config 0 has no interface number 0 [ 1545.688548][ T7434] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=27.08 [ 1545.698076][ T7434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.707144][ T2831] usb 5-1: Using ep0 maxpacket: 8 [ 1545.713837][ T7434] usb 3-1: config 0 descriptor?? [ 1545.759380][ T7434] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1545.783806][ C1] net_ratelimit: 28 callbacks suppressed [ 1545.783829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.795887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.802265][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.808551][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.815012][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.821205][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.827630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.833881][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.843679][ T2831] usb 5-1: unable to read config index 0 descriptor/all [ 1545.850743][ T2831] usb 5-1: can't read configurations, error -32 [ 1545.858688][ T28] usb 2-1: USB disconnect, device number 90 [ 1545.957244][T12776] usb 3-1: USB disconnect, device number 123 [ 1546.003412][ T2831] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1546.034219][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1546.243368][ T2831] usb 5-1: Using ep0 maxpacket: 8 [ 1546.363431][ T2831] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1546.371663][ T2831] usb 5-1: config 0 has no interface number 0 [ 1546.378081][ T2831] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=fb.fb [ 1546.387295][ T2831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.398254][ T2831] usb 5-1: config 0 descriptor?? [ 1546.415027][ T7434] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1546.503983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1546.510339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1546.648038][ T4289] usb 5-1: USB disconnect, device number 32 [ 1546.653370][ T7434] usb 4-1: Using ep0 maxpacket: 32 [ 1546.683498][ T28] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1546.733459][ T2831] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1546.773613][ T7434] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1546.781972][ T7434] usb 4-1: config 0 has no interface number 0 [ 1546.788373][ T7434] usb 4-1: New USB device found, idVendor=10d2, idProduct=453e, bcdDevice=26.ed [ 1546.797597][ T7434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.807492][ T7434] usb 4-1: config 0 descriptor?? [ 1546.857276][ T7434] usblcd 4-1:0.164: USBLCD model not supported. [ 1546.934018][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 1547.056985][ T7434] usb 4-1: USB disconnect, device number 95 [ 1547.063608][ T28] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1547.071833][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.082233][ T28] usb 2-1: config 0 has no interface number 0 [ 1547.088580][ T28] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1547.097892][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.118748][ T28] usb 2-1: config 0 descriptor?? [ 1547.133766][ T2831] usb 3-1: config 0 has an invalid interface number: 103 but max is 0 [ 1547.142013][ T2831] usb 3-1: config 0 has no interface number 0 [ 1547.148438][ T2831] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=27.08 [ 1547.157680][ T2831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.168581][ T28] Registered IR keymap rc-hauppauge [ 1547.179784][ T28] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0 [ 1547.189020][ T2831] usb 3-1: config 0 descriptor?? [ 1547.191917][ T28] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.186/rc/rc0/input215 [ 1547.239001][ T2831] gspca_main: touptek-2.14.0 probing 0547:6801 19:52:19 executing program 5: unshare(0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40044160, 0x3) 19:52:19 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)) [ 1547.385281][ T28] usb 2-1: USB disconnect, device number 91 [ 1547.436859][ T4289] usb 3-1: USB disconnect, device number 124 [ 1547.444544][T12776] usb 5-1: new high-speed USB device number 33 using dummy_hcd 19:52:19 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xe0, 0x21, 0x68, 0x20, 0x10d2, 0x453e, 0x26ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x0, 0x56, 0xd8, 0x5f}}]}}]}}, 0x0) 19:52:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfc, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19:52:19 executing program 1: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x120) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/88, 0x1b) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {0x0}, {&(0x7f0000000580)=""/155, 0x9b}, {0x0}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) ioctl(r1, 0xc2604110, &(0x7f0000000000)) 19:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x100000000001, 0x46, 0x200000000000002}], 0x174) [ 1547.684085][T12776] usb 5-1: Using ep0 maxpacket: 8 19:52:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x200000000000000}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xd8}}, 0x0) [ 1547.804270][T12776] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1547.812591][T12776] usb 5-1: config 0 has no interface number 0 [ 1547.819160][T12776] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=fb.fb [ 1547.828407][T12776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.848711][T12776] usb 5-1: config 0 descriptor?? 19:52:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000445ffc)=0x2, 0x4) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000f24000)=0x18b) 19:52:20 executing program 0: unshare(0x400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x5) 19:52:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x5, 0x22, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x300) [ 1547.995783][ T7434] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1548.098552][T12776] usb 5-1: USB disconnect, device number 33 19:52:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) close(r1) 19:52:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 19:52:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001300192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0ff00ff050000000007000100090ac2d00b0ccbd8", 0x58}], 0x1) 19:52:20 executing program 4: syz_usb_connect(0x0, 0x23a, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xe6, 0x81, 0xff, 0x8, 0x1870, 0x1, 0xfbfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xa}}]}}]}}, 0x0) [ 1548.243458][ T7434] usb 4-1: Using ep0 maxpacket: 32 [ 1548.364023][ T7434] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1548.372316][ T7434] usb 4-1: config 0 has no interface number 0 [ 1548.378689][ T7434] usb 4-1: New USB device found, idVendor=10d2, idProduct=453e, bcdDevice=26.ed [ 1548.387963][ T7434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.449314][ T7434] usb 4-1: config 0 descriptor?? [ 1548.496784][ T7434] usblcd 4-1:0.164: USBLCD model not supported. [ 1548.593414][T12776] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1548.710338][ T4289] usb 4-1: USB disconnect, device number 96 [ 1548.843339][T12776] usb 5-1: Using ep0 maxpacket: 8 [ 1548.963443][T12776] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1548.971653][T12776] usb 5-1: config 0 has no interface number 0 [ 1548.978060][T12776] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=fb.fb [ 1548.987255][T12776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.996957][T12776] usb 5-1: config 0 descriptor?? 19:52:21 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xe0, 0x21, 0x68, 0x20, 0x10d2, 0x453e, 0x26ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x0, 0x56, 0xd8, 0x5f}}]}}]}}, 0x0) 19:52:21 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x8000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0xfffffffffffffffa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) 19:52:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100), &(0x7f00000000c0)) 19:52:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x481) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:52:21 executing program 5: r0 = inotify_init() r1 = creat(&(0x7f0000000680)='./file0\x00', 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x80000003) fallocate(r1, 0x3, 0x0, 0x5) [ 1549.279838][ T4289] usb 5-1: USB disconnect, device number 34 19:52:21 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005d7000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x8001, 0x8, 0x0) madvise(&(0x7f000066f000/0x3000)=nil, 0x3000, 0x2) remap_file_pages(&(0x7f000081d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) 19:52:21 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000013000)=0xffffffffffffffae) close(r1) 19:52:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x48000000, 0x0, 0x0, 0x66, 0x0, 0x100000, 0x3600}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 19:52:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xfeffffffbfff3fc1, 0x0) [ 1549.607460][T28611] usb 4-1: new high-speed USB device number 97 using dummy_hcd 19:52:21 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000090000000000000000729ffb5dd36771f7b2bf00000400000037f6beb5887e090000000000"], 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:52:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x9, @raw_data="1fcb46d02ab6c63c415231b57b3a75537c49b43893fc974900400000463f0437f7ffd8500d384ced6347be0711b5c9cc1bf51d241901c2c02cf411338e817d388054685cbb344a3e0244c4ef0915c7c51d07d272610817ba58559342ce7918de9a85638015aef9a5e3cd6a7c9367289b69f9d462ebe0785411a26cfb487d7bc2a5456cb92cfdad5d3c088a2861de26cdb810b47f7095d5b1a0cf189b5b2fc861f8104c4c07882c2e8345bea52167e2d4f9e707d8df10dfbc8b3f2de6d19f8cec666e98588ed484ee"}) 19:52:21 executing program 4: syz_usb_connect(0x0, 0x23a, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xe6, 0x81, 0xff, 0x8, 0x1870, 0x1, 0xfbfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xa}}]}}]}}, 0x0) [ 1549.866975][T28611] usb 4-1: Using ep0 maxpacket: 32 [ 1549.986865][T28611] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1549.995238][T28611] usb 4-1: config 0 has no interface number 0 [ 1550.001508][T28611] usb 4-1: New USB device found, idVendor=10d2, idProduct=453e, bcdDevice=26.ed [ 1550.010721][T28611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.041488][T28611] usb 4-1: config 0 descriptor?? [ 1550.097871][T28611] usblcd 4-1:0.164: USBLCD model not supported. [ 1550.223483][T12776] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1550.301541][ T7434] usb 4-1: USB disconnect, device number 97 [ 1550.473426][T12776] usb 5-1: Using ep0 maxpacket: 8 [ 1550.593600][T12776] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1550.601765][T12776] usb 5-1: config 0 has no interface number 0 [ 1550.608114][T12776] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=fb.fb [ 1550.617364][T12776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.626974][T12776] usb 5-1: config 0 descriptor?? 19:52:22 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xe0, 0x21, 0x68, 0x20, 0x10d2, 0x453e, 0x26ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x0, 0x56, 0xd8, 0x5f}}]}}]}}, 0x0) 19:52:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 19:52:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f", 0x58, 0x0, 0x0, 0x0) 19:52:22 executing program 2: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) dup3(r2, r3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f", 0xd2, 0x60, 0x0, 0x0) 19:52:22 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="0800cf000000000086bfd04383000000b4841c6914ca60061cb432b5b0fc6f659cffa162fa62e75218b8607d2ac0623e6b6c061c09e98f2ddce5186f55f9b27687db5f3386f206c2f7ea32a948759140c3b90d3dad45e8b7eeb88b8af587a2c1") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) [ 1550.883345][T28611] usb 5-1: USB disconnect, device number 35 19:52:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000000)}, 0x2d8, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) set_mempolicy(0x0, 0x0, 0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) creat(0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) unshare(0x8020000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000003c0)={{0x2}, {0xfe, 0x6}, 0x5, 0x6, 0x8}) r7 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000380)={r8, 0x1, 0x6, @dev={[], 0xc}}, 0x10) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x1210}, {0xffffffffffffffff, 0x6308}, {0xffffffffffffffff, 0x18a50}, {r5, 0x1094}, {r6, 0x103e4}, {r9, 0x4000}], 0x6, &(0x7f0000000300), &(0x7f0000000340)={0x100000000}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r10, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 19:52:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup(r1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x475a}) 19:52:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x68e4}, 0xc) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x2b}}}, 0x1ce) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000340)=0x4) r4 = signalfd(r1, &(0x7f0000000040)={0x7}, 0x8) syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x4, 0x40000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x11, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000003c0)={0x8, @multicast2, 0x4e23, 0x0, 'lblcr\x00', 0x2, 0x99, 0x31}, 0x2c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000500)=""/119, &(0x7f0000000140)=0x77) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'osx.', '+.^proc\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000380)={0x2, 'gretap0\x00'}, 0x18) ioctl$TIOCCBRK(r4, 0x5428) r5 = msgget(0x3, 0x1) msgsnd(r5, &(0x7f0000000400)={0x2, "97f23ea5b830e70f14ef887913e7c903943f2a6c7a54850a469262ed1147b009e7825e6d3cfcc81256595126083e9505efba953fb62a3ef9f4ecf80fa0bddf99d957b11c4db502209e431a127a225d5918c283c2551ffb5e67048d465046c188d4f26a492d2e742e82fb03a66c711f1b472b999cde1cbc17a3044fe05b0e2765a21a80e57b80a6b9899087b2b63774281048d23c1ba49d773b409315e24271"}, 0xa7, 0x800) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x24, 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x2000000008004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 1551.193387][ T7434] usb 4-1: new high-speed USB device number 98 using dummy_hcd 19:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008040, &(0x7f0000000040)={0x2, 0x4e22, @initdev}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f0", 0xfd2b, 0x4004000, 0x0, 0xffffffffffffffda) [ 1551.277124][T17967] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 1551.298957][T17967] IPVS: length: 119 != 24 [ 1551.317804][T17972] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 0, id = 0 19:52:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100), &(0x7f0000000040)) [ 1551.433398][ T7434] usb 4-1: Using ep0 maxpacket: 32 19:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008040, &(0x7f0000000040)={0x2, 0x4e22, @initdev}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f0", 0xfd2b, 0x4004000, 0x0, 0xffffffffffffffda) 19:52:23 executing program 4: syz_usb_connect(0x0, 0x23a, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xe6, 0x81, 0xff, 0x8, 0x1870, 0x1, 0xfbfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xa}}]}}]}}, 0x0) [ 1551.553798][ T7434] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1551.562203][ T7434] usb 4-1: config 0 has no interface number 0 [ 1551.568622][ T7434] usb 4-1: New USB device found, idVendor=10d2, idProduct=453e, bcdDevice=26.ed [ 1551.577883][ T7434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.675056][ T7434] usb 4-1: config 0 descriptor?? [ 1551.717528][ T7434] usblcd 4-1:0.164: USBLCD model not supported. [ 1551.903360][T12776] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1551.919579][T28611] usb 4-1: USB disconnect, device number 98 [ 1552.023693][ C1] net_ratelimit: 27 callbacks suppressed [ 1552.023711][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1552.035711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1552.041838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1552.047999][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1552.054167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1552.060157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1552.066535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1552.072642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1552.143319][T12776] usb 5-1: Using ep0 maxpacket: 8 [ 1552.263503][T12776] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1552.271829][T12776] usb 5-1: config 0 has no interface number 0 [ 1552.278210][T12776] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=fb.fb [ 1552.287365][T12776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.297095][T12776] usb 5-1: config 0 descriptor?? 19:52:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x0, 0xb5c8f99a455a0b2d}, 0x4) 19:52:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0xfffffffffffffffd, 0x0) 19:52:24 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x65, 0xef, 0x1e, 0x8, 0x856, 0xac29, 0x7501, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4f, 0x8e, 0x87}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0xac, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x0, 0x0, 0x1, "f5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:52:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008040, &(0x7f0000000040)={0x2, 0x4e22, @initdev}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f0", 0xfd2b, 0x4004000, 0x0, 0xffffffffffffffda) [ 1552.542988][ T28] usb 5-1: USB disconnect, device number 36 19:52:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008040, &(0x7f0000000040)={0x2, 0x4e22, @initdev}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f0", 0xfd2b, 0x4004000, 0x0, 0xffffffffffffffda) 19:52:24 executing program 5: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x805c6103, &(0x7f0000000080)) 19:52:24 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000dab1440861201206df4000000010902240001000010000904b20002b90b2a000905c102e9020000000905030259030000008d29fe377202b3345953b7e8f35f05000000023d082c27c67df3c1ed2c4252826cd6b08c7cfd33c8f4f079340508ff82144f139bf745f711bdba0dc49a62a4d58a547e38ef25848196d8f6e90052bfc0a7a949ab3e95bcdb543d"], 0x0) 19:52:24 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x4}) [ 1552.743740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1552.750135][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:24 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3f, 0xa, 0x0, "8cac3a94aa7dfd73c37b6187fc5a11e774c84a936b60a327949ce1273b94266c"}) [ 1552.833717][T28611] usb 1-1: new high-speed USB device number 124 using dummy_hcd 19:52:24 executing program 1: clone3(&(0x7f0000000080)={0x68108600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:52:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, 0x0) [ 1552.973373][T12776] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1553.030043][T18222] IPVS: ftp: loaded support on port[0] = 21 [ 1553.073549][T28611] usb 1-1: Using ep0 maxpacket: 8 19:52:25 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1d, 0xd4, 0x38, 0x40, 0x867, 0x9812, 0xbb05, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd5, 0x0, 0x0, 0x83, 0xa2, 0x82}}]}}]}}, 0x0) 19:52:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="640ff24101660f08f20f1bfa0f20e06635000040000f22e0bad004b00fee36260f01dfaa8fc900010b0f080f005b9a", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(0x0, 0x0, 0x0) 19:52:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev}, "39002d15320963ff"}}}}}, 0x0) [ 1553.213573][T28611] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=75.01 [ 1553.222826][T28611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.285373][T28611] usb 1-1: config 0 descriptor?? [ 1553.326327][T18222] IPVS: ftp: loaded support on port[0] = 21 [ 1553.374081][T12776] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 1553.382483][T12776] usb 4-1: config 0 has no interface number 0 [ 1553.388932][T12776] usb 4-1: config 0 interface 178 altsetting 0 has an invalid endpoint with address 0xC1, skipping [ 1553.400171][T12776] usb 4-1: config 0 interface 178 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 857 [ 1553.410478][T12776] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=f4.6d [ 1553.419705][T12776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.430394][T12776] usb 4-1: config 0 descriptor?? [ 1553.475837][T12776] usb8xxx: probe of 4-1:0.178 failed with error -12 [ 1553.482776][T12776] lbtf_usb: probe of 4-1:0.178 failed with error -12 [ 1553.496056][ T7434] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1553.709693][T12776] usb 4-1: USB disconnect, device number 99 [ 1553.913544][ T7434] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 1553.921918][ T7434] usb 6-1: config 0 has no interface number 0 [ 1553.928560][ T7434] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=bb.05 [ 1553.937771][ T7434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.948703][ T7434] usb 6-1: config 0 descriptor?? [ 1554.000377][ T7434] comedi comedi0: Wrong number of endpoints [ 1554.006737][ T7434] dt9812 6-1:0.213: driver 'dt9812' failed to auto-configure device. [ 1554.196248][ T7434] usb 6-1: USB disconnect, device number 107 [ 1554.443820][T28611] mos7840 1-1:0.0: required endpoints missing [ 1554.459292][T28611] usb 1-1: USB disconnect, device number 124 [ 1554.493581][T12776] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1554.903801][T12776] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 1554.912380][T12776] usb 4-1: config 0 has no interface number 0 [ 1554.918692][T12776] usb 4-1: config 0 interface 178 altsetting 0 has an invalid endpoint with address 0xC1, skipping [ 1554.929659][T12776] usb 4-1: config 0 interface 178 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 857 [ 1554.939930][T12776] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=f4.6d [ 1554.940016][T12776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.958989][T12776] usb 4-1: config 0 descriptor?? [ 1554.964530][ T2831] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1555.005583][T12776] usb8xxx: probe of 4-1:0.178 failed with error -12 [ 1555.012510][T12776] lbtf_usb: probe of 4-1:0.178 failed with error -12 [ 1555.207193][ T4289] usb 4-1: USB disconnect, device number 100 [ 1555.313585][T28611] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1555.353498][ T2831] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 1555.361872][ T2831] usb 6-1: config 0 has no interface number 0 [ 1555.368317][ T2831] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=bb.05 [ 1555.377471][ T2831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.387683][ T2831] usb 6-1: config 0 descriptor?? [ 1555.440503][ T2831] comedi comedi0: Wrong number of endpoints [ 1555.446824][ T2831] dt9812 6-1:0.213: driver 'dt9812' failed to auto-configure device. [ 1555.553487][T28611] usb 1-1: Using ep0 maxpacket: 8 [ 1555.635159][ T4289] usb 6-1: USB disconnect, device number 108 [ 1555.673567][T28611] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=75.01 [ 1555.682895][T28611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.693919][T28611] usb 1-1: config 0 descriptor?? 19:52:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 19:52:28 executing program 4: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xfffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 19:52:28 executing program 1: clone3(&(0x7f0000000080)={0x68108600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:52:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x11, 0x0, 0x0, {0x7}, [@NDTA_NAME={0x8, 0x1, '%\x00'}]}, 0x1c}}, 0x0) 19:52:28 executing program 3: r0 = socket(0x200040000000015, 0x805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x114, 0x2719, &(0x7f0000000040)=""/9, &(0x7f0000000000)=0x9) [ 1556.065741][T28611] mos7840 1-1:0.0: required endpoints missing [ 1556.114908][T28611] usb 1-1: USB disconnect, device number 125 [ 1556.128405][T18261] IPVS: ftp: loaded support on port[0] = 21 19:52:28 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0xffffffffffff8001}) 19:52:28 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x806}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f407000000000a00"/32, 0x20) 19:52:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x2c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 19:52:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0xf2, "867328c6cb7a672da0c0eceada860c9b97388596da91a9dc4d1d080eca98abf7"}) 19:52:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="12", 0x1, 0x0, 0x0, 0x0) 19:52:28 executing program 1: clone3(&(0x7f0000000080)={0x68108600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:52:28 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x0, 0x80ffffff00000000], &(0x7f0000000000)={0x980905, 0x0, [], @p_u8=&(0x7f0000000100)}}) 19:52:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) [ 1556.677930][T18291] IPVS: ftp: loaded support on port[0] = 21 19:52:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="12", 0x1, 0x0, 0x0, 0x0) 19:52:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001100)={0x319d2daeca5e1c63}) add_key$user(0x0, 0x0, &(0x7f0000000100)="8d", 0x1, 0xfffffffffffffffb) shutdown(r0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 19:52:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="12", 0x1, 0x0, 0x0, 0x0) 19:52:29 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002f1ff0)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x20, 0xb01}, 0x14}}, 0x0) 19:52:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x12, 0x12, r1, 0x0) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000000), 0x0) 19:52:29 executing program 1: clone3(&(0x7f0000000080)={0x68108600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:52:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="12", 0x1, 0x0, 0x0, 0x0) 19:52:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 19:52:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:52:29 executing program 3: r0 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 19:52:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="9c", 0x1}], 0x1}}], 0x1, 0x0) [ 1557.471833][T18425] IPVS: ftp: loaded support on port[0] = 21 19:52:29 executing program 3: setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x3) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 19:52:29 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x928, 0x0) 19:52:29 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:52:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 19:52:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="9c", 0x1}], 0x1}}], 0x1, 0x0) [ 1557.910954][T18453] debugfs: File '18452' in directory 'proc' already present! 19:52:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) flock(r3, 0xc) 19:52:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)={0x32}) close(r1) 19:52:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="9c", 0x1}], 0x1}}], 0x1, 0x0) [ 1558.263772][ C1] net_ratelimit: 26 callbacks suppressed [ 1558.263795][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1558.275912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1558.282337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1558.288690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1558.295242][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1558.301554][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1558.308185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1558.314534][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:52:30 executing program 4: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x15}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 19:52:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:52:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="9c", 0x1}], 0x1}}], 0x1, 0x0) 19:52:30 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000d8ecb708cc04332552da6d0000010902240001004000000904ee00024ca2b70009050b02009a09be0009058a020000000000"], 0x0) 19:52:30 executing program 3: setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x3) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 19:52:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x10}]}}}]}, 0x3c}}, 0x0) 19:52:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="650f0fa8a4000dbaa000b86340ef6465660febb600580f7885f2009a1d86d900660fc7b77b0026360fc76800baf80c66b8d4dcf98366efbafc0c66ed0f78cc0f09", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000080)=0x4) [ 1558.840905][T18627] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 1558.925365][ T2831] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1558.980352][T18698] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 1558.993951][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.000350][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:52:31 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035000c00060000001900150003000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 19:52:31 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x800000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}}}, 0xa0) [ 1559.213443][ T2831] usb 2-1: Using ep0 maxpacket: 8 [ 1559.234980][T18713] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1559.265459][T18715] CUSE: zero length info key specified [ 1559.277557][T18716] CUSE: zero length info key specified 19:52:31 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x0, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 19:52:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x3ff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000280)=""/241, 0xf1}], 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 1559.354418][ T2831] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1559.362930][ T2831] usb 2-1: config 0 has no interface number 0 [ 1559.369407][ T2831] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 19:52:31 executing program 0: unshare(0x2000400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4112, 0x0) [ 1559.523898][ T2831] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=da.52 [ 1559.533259][ T2831] usb 2-1: New USB device strings: Mfr=109, Product=0, SerialNumber=0 [ 1559.541526][ T2831] usb 2-1: Manufacturer: syz 19:52:31 executing program 3: setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x3) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) [ 1559.602670][ T2831] usb 2-1: config 0 descriptor?? [ 1559.889719][ T2831] usb 2-1: NFC: Unable to get FW version [ 1559.896036][ T2831] pn533_usb: probe of 2-1:0.238 failed with error -90 [ 1559.910007][ T2831] usb 2-1: USB disconnect, device number 92 [ 1560.633398][ T2831] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1560.903464][ T2831] usb 2-1: Using ep0 maxpacket: 8 [ 1561.023498][ T2831] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1561.031715][ T2831] usb 2-1: config 0 has no interface number 0 [ 1561.038101][ T2831] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1561.123540][ T2831] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=da.52 [ 1561.132646][ T2831] usb 2-1: New USB device strings: Mfr=109, Product=0, SerialNumber=0 [ 1561.141130][ T2831] usb 2-1: Manufacturer: syz [ 1561.147104][ T2831] usb 2-1: config 0 descriptor?? [ 1561.426991][ T2831] usb 2-1: NFC: Unable to get FW version [ 1561.432793][ T2831] pn533_usb: probe of 2-1:0.238 failed with error -90 [ 1561.445216][ T2831] usb 2-1: USB disconnect, device number 93 19:52:33 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000d8ecb708cc04332552da6d0000010902240001004000000904ee00024ca2b70009050b02009a09be0009058a020000000000"], 0x0) 19:52:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) vmsplice(r1, &(0x7f0000000ac0)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) close(r3) 19:52:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80805, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:52:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1) 19:52:33 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x0, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 19:52:33 executing program 3: setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x3) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 19:52:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 19:52:33 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x0, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 19:52:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007121dff18946f610500020000001f003e010200010008000b000400ff7e280000001100ff000000000000eff24d8238cfa50223f7efbf7600000000000000000000000b0000", 0x4c}], 0x1}, 0x0) [ 1561.963616][ T2831] usb 2-1: new high-speed USB device number 94 using dummy_hcd 19:52:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x6) 19:52:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') [ 1562.054399][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 19:52:34 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x0, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 1562.223750][ T2831] usb 2-1: Using ep0 maxpacket: 8 [ 1562.343855][ T2831] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1562.352155][ T2831] usb 2-1: config 0 has no interface number 0 [ 1562.358531][ T2831] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1562.503835][ T2831] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=da.52 [ 1562.513093][ T2831] usb 2-1: New USB device strings: Mfr=109, Product=0, SerialNumber=0 [ 1562.521708][ T2831] usb 2-1: Manufacturer: syz [ 1562.529632][ T2831] usb 2-1: config 0 descriptor?? [ 1562.827917][ T2831] usb 2-1: NFC: Unable to get FW version [ 1562.834169][ T2831] pn533_usb: probe of 2-1:0.238 failed with error -90 [ 1562.846498][ T2831] usb 2-1: USB disconnect, device number 94 19:52:35 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000d8ecb708cc04332552da6d0000010902240001004000000904ee00024ca2b70009050b02009a09be0009058a020000000000"], 0x0) 19:52:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 19:52:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000100)=0x8) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 19:52:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x40000098], [0xc1]}) 19:52:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5420, 0x960000000000) 19:52:35 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000200)=0x31) 19:52:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x2c3}, {0x0}, {&(0x7f0000000100)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1bb054d54ac45a333c28785d630fd1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa5064492916d98251883c182f2ec07ed91d53e745a1b28530915018508b8d9d2e61860cf64cf10f6aeee77bfa0a8b59b471db757c2688031c4c9aed23aa465965f1b7ea71edcd4e5535300574d16539766ddfaf61160d7c0a9b82b0dc6fc2483bd3859df044603d030c6c7e5756a8fc1b170258", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:52:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 19:52:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f03d, 0x0, [], @p_u8=0x0}}) 19:52:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x3) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x5423, &(0x7f0000000100)={0x3}) [ 1563.643506][ T2831] usb 2-1: new high-speed USB device number 95 using dummy_hcd 19:52:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 19:52:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000380)={0x0, 0x7530}, 0x10) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 1563.896842][ T2831] usb 2-1: Using ep0 maxpacket: 8 [ 1564.023827][ T2831] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1564.032160][ T2831] usb 2-1: config 0 has no interface number 0 [ 1564.038851][ T2831] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1564.134104][ T2831] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=da.52 [ 1564.143349][ T2831] usb 2-1: New USB device strings: Mfr=109, Product=0, SerialNumber=0 [ 1564.151550][ T2831] usb 2-1: Manufacturer: syz [ 1564.158267][ T2831] usb 2-1: config 0 descriptor?? [ 1564.446947][ T2831] usb 2-1: NFC: Unable to get FW version [ 1564.452765][ T2831] pn533_usb: probe of 2-1:0.238 failed with error -90 [ 1564.465737][ T2831] usb 2-1: USB disconnect, device number 95 [ 1564.513777][ C1] net_ratelimit: 26 callbacks suppressed [ 1564.513790][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.525730][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1564.531967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.538164][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1564.544458][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.550423][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1564.556791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.562851][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:52:36 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000d8ecb708cc04332552da6d0000010902240001004000000904ee00024ca2b70009050b02009a09be0009058a020000000000"], 0x0) 19:52:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) 19:52:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x800}, 0x40000) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18}], 0x18}], 0x1b5, 0x0) 19:52:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 19:52:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623690f00080004000c0816000b770000a3c728f1c46b7b31afdc1338d544", 0x38}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001e0009010c0000000000000007003401000000000808bac00049000018000a00"], 0x1}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:52:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) [ 1564.991968][T19427] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 19:52:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x1400000006, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x0, 0x0, {0x8, @sliced}}) 19:52:37 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) read(r1, &(0x7f0000000500)=""/4096, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "2cc344", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 19:52:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000c9d000/0x1000)=nil) 19:52:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa) close(r3) r6 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4f20, 0x0) [ 1565.233931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1565.240321][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:37 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000), 0x8) [ 1565.293676][ T4289] usb 2-1: new high-speed USB device number 96 using dummy_hcd 19:52:37 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x1e, 0xa}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1565.553458][ T4289] usb 2-1: Using ep0 maxpacket: 8 [ 1565.673978][ T4289] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1565.682353][ T4289] usb 2-1: config 0 has no interface number 0 [ 1565.688733][ T4289] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1565.773752][ T4289] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=da.52 [ 1565.782923][ T4289] usb 2-1: New USB device strings: Mfr=109, Product=0, SerialNumber=0 [ 1565.791539][ T4289] usb 2-1: Manufacturer: syz [ 1565.798215][ T4289] usb 2-1: config 0 descriptor?? [ 1566.087575][ T4289] usb 2-1: NFC: Unable to get FW version [ 1566.093734][ T4289] pn533_usb: probe of 2-1:0.238 failed with error -90 [ 1566.106382][ T4289] usb 2-1: USB disconnect, device number 96 19:52:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)=0x4007fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) 19:52:38 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 19:52:38 executing program 5: r0 = eventfd(0xffffffff) r1 = eventfd(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r1}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r0}) 19:52:38 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) read(r1, &(0x7f0000000500)=""/4096, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "2cc344", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 19:52:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa) close(r3) r6 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4f20, 0x0) 19:52:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0xfffffffffffffdff, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="cae5edd8cb", 0x0, 0xfffffff8, 0x0, 0x0, 0x0}) 19:52:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x80002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, 0x0) 19:52:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x300}, [@nested={0x4}]}, 0x18}}, 0x0) 19:52:39 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) read(r1, &(0x7f0000000500)=""/4096, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "2cc344", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 19:52:39 executing program 5: r0 = eventfd(0xffffffff) r1 = eventfd(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r1}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r0}) 19:52:39 executing program 1: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="e67e0c9e15c60ff9a6886af27dfafeb58626938829d9181fc338dcd4e9d83dbc"}) 19:52:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 19:52:39 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)=0x4007fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) 19:52:39 executing program 5: r0 = eventfd(0xffffffff) r1 = eventfd(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r1}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r0}) [ 1567.271032][T19811] input: syz1 as /devices/virtual/input/input218 19:52:39 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x9}) 19:52:39 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) read(r1, &(0x7f0000000500)=""/4096, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "2cc344", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 19:52:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa) close(r3) r6 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4f20, 0x0) 19:52:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x8000002, 0x802, 0x40000800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 19:52:39 executing program 5: r0 = eventfd(0xffffffff) r1 = eventfd(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r1}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r0}) 19:52:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x2000000000000043, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xe191, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 1567.714830][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1567.724743][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 19:52:39 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)=0x4007fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) 19:52:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x4c}}, 0x0) 19:52:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x6, &(0x7f0000000000)={@multicast2}, 0x8) 19:52:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x100) close(r0) 19:52:40 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x1, 0x0) 19:52:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 19:52:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffffa, 0x4) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:52:40 executing program 1: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x800800000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) 19:52:40 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa) close(r3) r6 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4f20, 0x0) 19:52:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000009c0)={'#! ', './file0', [], 0xa, "39980cfd5d119cc412"}, 0x14) 19:52:40 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [], [[]]}) 19:52:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)="390000001300090468fe585de9e600000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab090000", 0x33}], 0x1) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:52:40 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)=0x4007fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) 19:52:40 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 19:52:40 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [], [[]]}) 19:52:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x100000000000019, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0xfffffe89, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) 19:52:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x807, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x9, @pix_mp={0x0, 0x0, 0x31364d4e, 0x0, 0x0, [{}, {0x0, 0x3d02}]}}) 19:52:41 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [], [[]]}) 19:52:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 19:52:41 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) fallocate(r0, 0x8, 0x0, 0x2000000000000002) 19:52:41 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x3c7}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:52:41 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902680002010000000904000001020d00914f8db50eae1ede00052406000105240000000d240f0100000000000000000006391a0000000c241b00000000000000000009058103fbbcd10a000904010100020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:52:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x34, r1, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7de}]}]}]}, 0x34}}, 0x0) 19:52:41 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [], [[]]}) 19:52:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0) 19:52:41 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e21cd50801222c01c503000000010902240001000000000904000002fdf0680009050f024435beb2c0529951120000000000"], 0x0) [ 1569.655855][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:52:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x802, 0x0) dup3(r0, r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000600)="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", 0x57a, 0x8005, 0x0, 0x0) write(r1, &(0x7f00000003c0)='g', 0x1) 19:52:41 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 19:52:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 19:52:42 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) dup3(r1, r0, 0x0) [ 1569.956655][ T2831] usb 4-1: new high-speed USB device number 101 using dummy_hcd 19:52:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x20400000, 0x0) [ 1570.093819][ T4289] usb 2-1: new high-speed USB device number 97 using dummy_hcd 19:52:42 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x10000000000000e2) [ 1570.224308][ T2831] usb 4-1: Using ep0 maxpacket: 16 [ 1570.333776][ T4289] usb 2-1: Using ep0 maxpacket: 8 [ 1570.375625][ T2831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.385904][ T2831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1570.395057][ T2831] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1570.453715][ T4289] usb 2-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 1570.464342][ T4289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1348, setting to 1024 [ 1570.475604][ T4289] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1570.485752][ T4289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 19:52:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x3c7}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1570.499043][ T4289] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 3.c5 [ 1570.508348][ T4289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.521068][ T4289] usb 2-1: config 0 descriptor?? [ 1570.551628][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1570.568664][ T4289] usb 2-1: probing VID:PID(2201:012C) [ 1570.575004][ T4289] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 1570.581548][ T4289] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1570.589787][ T4289] vub300: probe of 2-1:0.0 failed with error -22 [ 1570.603710][ T2831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1570.612952][ T2831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.621538][ T2831] usb 4-1: Product: syz [ 1570.625893][ T2831] usb 4-1: Manufacturer: syz [ 1570.630593][ T2831] usb 4-1: SerialNumber: syz [ 1570.743738][ C1] net_ratelimit: 26 callbacks suppressed [ 1570.743762][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.755669][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.762293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.768504][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.774702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.780666][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.787076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.793282][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.804374][ T4289] usb 2-1: USB disconnect, device number 97 [ 1570.915395][ T2831] cdc_ncm 4-1:1.0: skipping garbage [ 1570.920711][ T2831] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 1570.927975][ T2831] cdc_ncm 4-1:1.0: bind() failure [ 1570.938734][ T2831] usb 4-1: USB disconnect, device number 101 [ 1571.463709][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1571.469843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1571.573356][ T4289] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1571.653277][ T2831] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1571.833285][ T4289] usb 2-1: Using ep0 maxpacket: 8 [ 1571.893386][ T2831] usb 4-1: Using ep0 maxpacket: 16 [ 1571.953492][ T4289] usb 2-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 1571.964052][ T4289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1348, setting to 1024 [ 1571.975237][ T4289] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1571.985327][ T4289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1571.998385][ T4289] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 3.c5 [ 1572.007562][ T4289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.017280][ T4289] usb 2-1: config 0 descriptor?? [ 1572.023577][ T2831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.033854][ T2831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1572.042759][ T2831] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1572.058497][ T4289] usb 2-1: probing VID:PID(2201:012C) [ 1572.064744][ T4289] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 1572.071298][ T4289] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1572.079501][ T4289] vub300: probe of 2-1:0.0 failed with error -22 [ 1572.223738][ T2831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1572.232915][ T2831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.241108][ T2831] usb 4-1: Product: syz [ 1572.245443][ T2831] usb 4-1: Manufacturer: syz [ 1572.250105][ T2831] usb 4-1: SerialNumber: syz [ 1572.256617][ T4289] usb 2-1: USB disconnect, device number 98 [ 1572.535361][ T2831] cdc_ncm 4-1:1.0: skipping garbage [ 1572.540671][ T2831] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 1572.547702][ T2831] cdc_ncm 4-1:1.0: bind() failure [ 1572.558430][ T2831] usb 4-1: USB disconnect, device number 102 19:52:44 executing program 3: request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044d03, &(0x7f0000000080)) 19:52:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xfffe}, {0x0, 0xfffd}], 0x2) semop(r2, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) semop(r2, &(0x7f00000000c0)=[{0x0, 0x6}], 0x1) 19:52:44 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x10000000005, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "207dd549815de917"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r1}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b9f5bd33d536d6c6"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "45929f3c972bdea7"}}, 0x48}}, 0x0) 19:52:44 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x10000000000000e2) 19:52:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) 19:52:44 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x3c7}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:52:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="003f55b4f14aabfd"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x95cff4ab20fa98b7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}}, @TCA_U32_SEL={0x14}]}}]}, 0x84}}, 0x0) 19:52:44 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x10000000000000e2) 19:52:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x3b3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}, {{0x9, 0x5, 0x1, 0x3, 0x8}}]}}]}}]}}, 0x0) syz_usb_ep_write(r2, 0x0, 0x273, &(0x7f0000000000)="5c8f00cfe2bd28560a757e2768af58") 19:52:45 executing program 0: getresuid(&(0x7f0000002540), 0xfffffffffffffffe, 0x0) 19:52:45 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x10000000000000e2) 19:52:45 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000006367a08b11342009b330000000109021b0001000000000904ee00012479d100070501020000000000"], 0x0) 19:52:45 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x0, 0x0, 0x6, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x10000}, 0x12) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @aes256, 0x0, "e18c93d23162fe66"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 19:52:45 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x3c7}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1573.216409][ T4289] usb 4-1: new high-speed USB device number 103 using dummy_hcd 19:52:45 executing program 4: unshare(0x2000400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937a, &(0x7f0000000580)) 19:52:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000000040)='&lo(#securitylo\x00', 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x5011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1573.398484][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.473677][T28611] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1573.493861][ T4289] usb 4-1: Using ep0 maxpacket: 8 19:52:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac) syz_open_dev$media(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8}) r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0x0) getgid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0xa198) [ 1573.624411][ T4289] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 1573.632922][ T4289] usb 4-1: config 0 has no interface number 0 [ 1573.639288][ T4289] usb 4-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1573.650578][ T4289] usb 4-1: config 0 interface 169 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1573.661821][ T4289] usb 4-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 1573.671079][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.723510][T28611] usb 2-1: Using ep0 maxpacket: 8 19:52:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000000040)='&lo(#securitylo\x00', 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x5011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1573.777289][ T4289] usb 4-1: config 0 descriptor?? [ 1573.853534][T28611] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1573.861844][T28611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.872244][T28611] usb 2-1: config 0 has no interface number 0 [ 1573.878596][T28611] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1573.888650][T28611] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=33.9b 19:52:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0xffffffffffffff60, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/223, 0xdf}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x900) [ 1573.897980][T28611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.027400][ T4289] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.169/input/input220 [ 1574.114588][T28611] usb 2-1: config 0 descriptor?? [ 1574.203984][T28611] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1574.367005][ T2831] usb 2-1: USB disconnect, device number 99 [ 1574.376039][T10128] usb 2-1: Failed to submit usb control message: -71 [ 1574.382835][T10128] usb 2-1: unable to send the bmi data to the device: -71 [ 1574.390545][T10128] usb 2-1: unable to get target info from device [ 1574.397061][T10128] usb 2-1: could not get target info (-71) [ 1574.403253][T10128] usb 2-1: could not probe fw (-71) [ 1574.438563][T12776] usb 4-1: USB disconnect, device number 103 [ 1574.453622][ C1] xpad 4-1:0.169: xpad_irq_out - usb_submit_urb failed with result -19 [ 1574.462335][T12776] xpad 4-1:0.169: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1575.143675][T28611] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1575.383718][T28611] usb 2-1: Using ep0 maxpacket: 8 19:52:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 19:52:47 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="68589efd77186ae6af444c8ea2b9b6c7", 0x0, 0x0, 0x1, 0x1}, 0x20) 19:52:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000000040)='&lo(#securitylo\x00', 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x5011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1575.513851][T28611] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1575.522238][T28611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.532591][T28611] usb 2-1: config 0 has no interface number 0 [ 1575.538896][T28611] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1575.548946][T28611] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=33.9b [ 1575.558223][T28611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.625463][T28611] usb 2-1: config 0 descriptor?? [ 1575.691861][T28611] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1575.866746][T12776] usb 2-1: USB disconnect, device number 100 [ 1575.883562][T10128] usb 2-1: Failed to submit usb control message: -71 [ 1575.890434][T10128] usb 2-1: unable to send the bmi data to the device: -71 [ 1575.897895][T10128] usb 2-1: unable to get target info from device [ 1575.904392][T10128] usb 2-1: could not get target info (-71) [ 1575.910290][T10128] usb 2-1: could not probe fw (-71) 19:52:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000010000000000000004fafa49dc4b17b60"], 0x1e8}}, 0x0) sendmmsg(r1, &(0x7f0000000240), 0xe1, 0x0) 19:52:48 executing program 2: select(0x29, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0xfffe}, &(0x7f0000000340)={0x0, 0x2710}) 19:52:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac) syz_open_dev$media(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8}) r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0x0) getgid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0xa198) 19:52:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 19:52:48 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000006) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000000)=0x251) 19:52:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000000040)='&lo(#securitylo\x00', 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x5011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'netdevsim0\x00', 0x400}) 19:52:48 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680c0009000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 19:52:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 19:52:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0xb, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) [ 1576.565294][T20605] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 19:52:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000002240), &(0x7f00000000c0)=0x4) 19:52:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 1576.983887][ C1] net_ratelimit: 26 callbacks suppressed [ 1576.983908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1576.996144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1577.002652][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1577.009096][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1577.016319][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1577.022711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1577.029345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1577.035712][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:52:49 executing program 1: r0 = eventfd2(0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000b97000)=[{&(0x7f0000000000)="3137cd12f117f146", 0x8}], 0x1) 19:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_STATS_ENABLED={0x8, 0x2a, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}}, 0x0) 19:52:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) unshare(0x400) ioctl$UI_DEV_SETUP(r0, 0x40045568, 0x0) 19:52:49 executing program 3: r0 = fsopen(&(0x7f0000000600)='securityfs\x00', 0x0) close(r0) 19:52:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000002240), &(0x7f00000000c0)=0x4) 19:52:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac) syz_open_dev$media(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8}) r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0x0) getgid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0xa198) [ 1577.189040][T20625] netlink: 'syz-executor.5': attribute type 42 has an invalid length. 19:52:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000002240), &(0x7f00000000c0)=0x4) 19:52:49 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB='\''], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:49 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32=r4, @ANYBLOB="02000005000023000c001a0008000200c1000400"], 0x2c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x2, 0x0) 19:52:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r3, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000341e00"/23, @ANYRES32]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:52:49 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb2, 0x55, 0x8a, 0x40, 0xdba, 0x1000, 0xd9f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x39, 0x11, 0x6b}}]}}]}}, 0x0) [ 1577.591860][T20658] debugfs: Directory '20658-4' with parent 'kvm' already present! 19:52:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000002240), &(0x7f00000000c0)=0x4) [ 1577.703724][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1577.710045][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:52:49 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002900)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 19:52:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 19:52:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x3, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) [ 1577.885884][T28611] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1578.036110][T20779] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 19:52:50 executing program 0: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x200000000c, 0x1, 0x0, &(0x7f0000048000), 0x0) 19:52:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac) syz_open_dev$media(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8}) r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0x0) getgid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0xa198) 19:52:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1578.265707][T28611] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=d9.f7 [ 1578.274995][T28611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:52:50 executing program 0: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x200000000c, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 1578.342917][T20887] vhci_hcd: vhci_hub_control:628: default hub control req: 2300 v0000 i0000 l0 [ 1578.351026][T28611] usb 2-1: config 0 descriptor?? 19:52:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 19:52:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)=[{0x10, 0x11}], 0x10}}], 0x2, 0x0) [ 1578.566312][T20899] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 1578.605088][T12776] usb 2-1: USB disconnect, device number 101 [ 1579.403489][T28611] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1579.763562][T28611] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=d9.f7 [ 1579.772798][T28611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.782610][T28611] usb 2-1: config 0 descriptor?? [ 1580.025453][T28611] usb 2-1: USB disconnect, device number 102 19:52:52 executing program 1: unshare(0x28020400) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="03", 0xffffffffffffffff}], 0x1, 0x0) 19:52:52 executing program 0: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x200000000c, 0x1, 0x0, &(0x7f0000048000), 0x0) 19:52:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 19:52:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x0) 19:52:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 19:52:52 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) [ 1580.616178][T20924] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 19:52:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x24}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00t'], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:52:52 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000000), 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 19:52:52 executing program 0: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x200000000c, 0x1, 0x0, &(0x7f0000048000), 0x0) 19:52:52 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 19:52:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1580.817966][T20932] Failed to remove local publication {0,0,0}/2612559164 19:52:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x3cb) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f455c410600010005010d4da5921d8fee0e0dfd81da"], 0x16) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) write$FUSE_DIRENTPLUS(r4, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 19:52:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000040)) 19:52:53 executing program 0: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb3, 0x0, &(0x7f0000000000)) [ 1580.968276][T20942] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 19:52:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980915, 0x0, 0x0, [], 0x0}) [ 1581.136551][T28611] usb 3-1: new high-speed USB device number 125 using dummy_hcd 19:52:53 executing program 5: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x80ffff, 0x2e, 0x2e, 0x80ffff, 0x5f, 0x2e, 0x3c46, 0x80ffff]}, 0x3c) 19:52:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffc7}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010020105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f48d00000000000000de3d0000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 19:52:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0xffff) ppoll(&(0x7f0000001440)=[{r3}, {r2}], 0x2, &(0x7f0000001480), 0x0, 0x0) [ 1581.387289][T28611] usb 3-1: Using ep0 maxpacket: 8 [ 1581.504075][T28611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.515312][T28611] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1581.524707][T28611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.584056][T28611] usb 3-1: config 0 descriptor?? [ 1582.056173][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.064094][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.071798][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.079670][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.087480][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.095283][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.102959][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.110707][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.118535][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.126280][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.134100][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.141713][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.149485][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.157468][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.165258][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.172928][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.180690][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.188437][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.196208][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.203983][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.211580][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.219371][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.227147][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.234995][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.242596][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.250338][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.258161][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.265929][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.273779][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.281447][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.289237][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.296957][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.304755][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.312373][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.320204][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.327984][T28611] holtek_mouse 0003:04D9:A067.0069: unknown main item tag 0x0 [ 1582.337407][T28611] holtek_mouse 0003:04D9:A067.0069: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 1582.352670][T28611] usb 3-1: USB disconnect, device number 125 [ 1583.053501][T28611] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1583.223557][ C1] net_ratelimit: 26 callbacks suppressed [ 1583.223572][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1583.235515][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1583.241748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1583.247960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1583.254235][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1583.260237][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1583.266678][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1583.272690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1583.323319][T28611] usb 3-1: Using ep0 maxpacket: 8 [ 1583.443526][T28611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.454657][T28611] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1583.463889][T28611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.473358][T28611] usb 3-1: config 0 descriptor?? 19:52:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x20, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002007}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0x0, 0x0, 0x0) 19:52:55 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x88001) sendfile(r0, r2, 0x0, 0x800000000024) 19:52:55 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x31, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[], 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x51, "c52b8b31487d989585a8a147c9699c47b996000dbc30c69ee922fc04644a2ea97d1eb4ad568440c6c97a7bdac498cdc78d419badc9635130e640d3b8e13f716170534f2976b234f5e97bdb7edd63e42a8c"}, 0x5d) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 19:52:55 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\x8f-\xf4\x97\xac#*\xff\"\xc2M!K\x82\xa2\x05\xe8\x1e\x99\xe1y,Ly-V\'Pt\x1f\xf0p\xbb\xa2`\xe1\xec\xa7}\x94^\x82\xcc&\x13_}\xea\x9eof\xa7\xa7\xe5\xe1L0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000002a00)=[{&(0x7f0000000400)="a10e1a7fbdccb22436392da594acde35ad3292e5b9f4ccc4d44e5179157b2163d0bcd9f4bcc792825e0f75b9105db6bc28e8c1a6ec86465456681aafd529fed65dcbc962dacf9e1d87e480338ee61ea739c2770d2b920c989995fd98522fd641042e14ad6be78fcbf3f13cc551f5eebbad4aa44da12f69fbfbf1672a78aa043e52dcf25ba3b27bf8b829fcc7f7c0563fb06ffbb62a26797b", 0x98}, {&(0x7f0000002ac0)="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", 0xf69}, {&(0x7f00000015c0)="8f", 0x1}], 0x3, 0x0) 19:52:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0xf1, &(0x7f0000000180)=[{}, {0x5}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 19:52:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x18601, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0x2, 0x6, 0x794, 0x6550, 0x0, 0x3f, 0x4004, 0x5, 0x8, 0x1000, 0x5, 0x80, 0x100000001, 0x2, 0x4, 0x6, 0x3, 0x9a3, 0x9, 0x9, 0x200, 0x3f, 0x0, 0x2, 0x1000, 0x3, 0x5, 0x0, 0x344, 0x9, 0x3, 0x9, 0x3, 0x10001, 0x374e, 0x4, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x202, 0x4, 0x100000001, 0x9, 0x3, 0x1000, 0x7f}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x80000000, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x400003) ioctl(r1, 0x8916, &(0x7f0000000000)) 19:52:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577e7251017595b511f20757365723a73797a20"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 19:52:56 executing program 2: r0 = socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000000c0)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000000)) 19:52:56 executing program 2: r0 = socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000000c0)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000000)) [ 1584.472490][T21130] encrypted_key: keyword 'newç%Y[Q' not recognized [ 1584.498949][T21164] encrypted_key: keyword 'newç%Y[Q' not recognized 19:52:56 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 19:52:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) 19:52:56 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x0, "a9895b8f5f60651bea1edad4ac20c5da2c878325608961b8436e9f31b00bd406"}) 19:52:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x7, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x1000000}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 19:52:56 executing program 2: r0 = socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000000c0)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000000)) 19:52:57 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x88001) 19:52:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x600) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x70e000) 19:52:57 executing program 2: r0 = socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000000c0)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000000)) 19:52:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 1585.133737][T28611] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1585.175536][T21250] xt_helper: cannot load conntrack support for proto=7 19:52:57 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = getpgid(0x0) r2 = getpid() kcmp(r1, r2, 0x0, 0xffffffffffffffff, r0) [ 1585.373745][T28611] usb 5-1: Using ep0 maxpacket: 8 19:52:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7b, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @empty}}}, &(0x7f00000003c0)=0x98) 19:52:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/0\x00yF\x01tz\x9b\x88\xb3\a\x04\xd7a0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r1) 19:53:00 executing program 0: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xca0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f000000cd00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 19:53:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x4000009a], [0xc1]}) 19:53:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x4}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000180000003b000100ffff0000000000000000b5060800fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1588.419552][ T2831] usb 5-1: new high-speed USB device number 39 using dummy_hcd 19:53:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000240)={0x7b, 0x0, [0xc0010209]}) 19:53:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x15, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x70f000) [ 1588.548821][T21524] netlink: 103 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1588.573712][T28611] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1588.673608][ T2831] usb 5-1: Using ep0 maxpacket: 8 [ 1588.795533][ T2831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1588.805432][ T2831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853 [ 1588.815610][ T2831] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1588.815655][T28611] usb 3-1: Using ep0 maxpacket: 8 [ 1588.833990][ T2831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1588.843227][ T2831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.934111][T28611] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1588.947285][T28611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1588.954175][T28611] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.00 [ 1588.963457][T28611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.984171][T28611] usb 3-1: config 0 descriptor?? [ 1589.029244][T28611] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input222 [ 1589.265255][T12776] usb 3-1: USB disconnect, device number 127 [ 1589.338789][ T2831] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1589.463654][ C1] net_ratelimit: 26 callbacks suppressed [ 1589.463678][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.475613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.481748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.488108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.494320][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.500506][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.506922][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.513014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.553329][ C0] usblp0: nonzero read bulk status received: -71 [ 1589.559821][T21401] usblp0: error -71 reading from printer [ 1589.568725][T28611] usb 5-1: USB disconnect, device number 39 [ 1589.585115][T28611] usblp0: removed 19:53:02 executing program 3: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0)="df", 0x1}]) 19:53:02 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) setitimer(0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00@\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) 19:53:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000001}) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x2001}) 19:53:02 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 19:53:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1590.112095][T28611] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1590.142340][T21648] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1590.155093][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1590.174548][T21648] device sit0 left promiscuous mode [ 1590.183787][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1590.190072][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1590.195978][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1590.373720][T28611] usb 3-1: Using ep0 maxpacket: 8 [ 1590.493466][ T28] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1590.511524][T28611] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1590.524495][T28611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1590.531318][T28611] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.00 [ 1590.540562][T28611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.554127][T28611] usb 3-1: config 0 descriptor?? [ 1590.602288][T28611] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input223 [ 1590.773475][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 1590.799550][T28611] usb 3-1: USB disconnect, device number 2 [ 1590.903892][ T28] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1590.913772][ T28] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853 [ 1590.923909][ T28] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1590.937184][ T28] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1590.946532][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:53:03 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 19:53:03 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000012c0), 0x1000) close(r1) 19:53:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002880)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, 0xe8) 19:53:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00') writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='b', 0x1}], 0x1) 19:53:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @window, @sack_perm], 0x20000000000001ce) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x9, 0xffffffff}, 0x14) shutdown(r0, 0x1) [ 1591.428848][ T28] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 19:53:03 executing program 0: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x9) 19:53:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 1591.643296][ C1] usblp0: nonzero read bulk status received: -71 [ 1591.649949][T21661] usblp0: error -71 reading from printer [ 1591.673335][ C0] usblp0: nonzero read bulk status received: -71 [ 1591.698115][T12776] usb 5-1: USB disconnect, device number 40 [ 1591.726596][T21652] ===================================================== [ 1591.733096][T21652] BUG: KMSAN: use-after-free in usb_autopm_put_interface+0xf2/0x120 [ 1591.733096][T21652] CPU: 0 PID: 21652 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1591.733096][T21652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.733096][T21652] Call Trace: [ 1591.733096][T21652] dump_stack+0x191/0x1f0 [ 1591.733096][T21652] kmsan_report+0x14a/0x2f0 [ 1591.733096][T21652] __msan_warning+0x73/0xf0 [ 1591.733096][T21652] usb_autopm_put_interface+0xf2/0x120 [ 1591.733096][T21652] usblp_release+0x182/0x3d0 [ 1591.733096][T21652] ? usblp_open+0x610/0x610 [ 1591.733096][T21652] __fput+0x4c9/0xba0 [ 1591.733096][T21652] ____fput+0x37/0x40 [ 1591.733096][T21652] ? fput_many+0x2a0/0x2a0 [ 1591.733096][T21652] task_work_run+0x22e/0x2a0 [ 1591.733096][T21652] prepare_exit_to_usermode+0x39d/0x4d0 [ 1591.733096][T21652] syscall_return_slowpath+0x90/0x610 [ 1591.733096][T21652] do_syscall_64+0xdc/0x160 [ 1591.733096][T21652] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1591.733096][T21652] RIP: 0033:0x413741 [ 1591.733096][T21652] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1591.733096][T21652] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1591.733096][T21652] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413741 [ 1591.863183][T21652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1591.863183][T21652] RBP: 0000000000000001 R08: ffffffff81620c74 R09: 00000000b1f2c129 [ 1591.863183][T21652] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20 [ 1591.863183][T21652] R13: 000000000018498d R14: 0000000000760db0 R15: 000000000075bf2c [ 1591.863183][T21652] ? wq_watchdog_touch+0x24/0x100 [ 1591.863183][T21652] [ 1591.863183][T21652] Uninit was created at: [ 1591.863183][T21652] kmsan_internal_poison_shadow+0x60/0x110 [ 1591.863183][T21652] kmsan_slab_free+0x8d/0x100 [ 1591.863183][T21652] kfree+0x4c1/0x2e70 [ 1591.863183][T21652] usb_release_interface+0x105/0x120 [ 1591.863183][T21652] device_release+0xe2/0x380 [ 1591.863183][T21652] kobject_put+0x38d/0x480 [ 1591.863183][T21652] put_device+0x51/0x70 [ 1591.863183][T21652] usb_disable_device+0x69a/0x1150 [ 1591.863183][T21652] usb_disconnect+0x51e/0xd60 [ 1591.863183][T21652] hub_event+0x3fd0/0x72f0 [ 1591.863183][T21652] process_one_work+0x1572/0x1ef0 [ 1591.863183][T21652] worker_thread+0x111b/0x2460 [ 1591.863183][T21652] kthread+0x4b5/0x4f0 [ 1591.863183][T21652] ret_from_fork+0x35/0x40 [ 1591.863183][T21652] ===================================================== [ 1591.863183][T21652] Disabling lock debugging due to kernel taint [ 1591.863183][T21652] Kernel panic - not syncing: panic_on_warn set ... [ 1591.863183][T21652] CPU: 0 PID: 21652 Comm: syz-executor.4 Tainted: G B 5.4.0-rc3+ #0 [ 1591.863183][T21652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.863183][T21652] Call Trace: [ 1591.863183][T21652] dump_stack+0x191/0x1f0 [ 1591.863183][T21652] panic+0x3c9/0xc1e [ 1591.863183][T21652] kmsan_report+0x2e8/0x2f0 [ 1591.863183][T21652] __msan_warning+0x73/0xf0 [ 1591.863183][T21652] usb_autopm_put_interface+0xf2/0x120 [ 1591.863183][T21652] usblp_release+0x182/0x3d0 [ 1591.863183][T21652] ? usblp_open+0x610/0x610 [ 1591.863183][T21652] __fput+0x4c9/0xba0 [ 1591.863183][T21652] ____fput+0x37/0x40 [ 1591.863183][T21652] ? fput_many+0x2a0/0x2a0 [ 1591.863183][T21652] task_work_run+0x22e/0x2a0 [ 1591.863183][T21652] prepare_exit_to_usermode+0x39d/0x4d0 [ 1591.863183][T21652] syscall_return_slowpath+0x90/0x610 [ 1591.863183][T21652] do_syscall_64+0xdc/0x160 [ 1591.863183][T21652] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1591.863183][T21652] RIP: 0033:0x413741 [ 1591.863183][T21652] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1591.863183][T21652] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1591.863183][T21652] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413741 [ 1591.863183][T21652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1591.863183][T21652] RBP: 0000000000000001 R08: ffffffff81620c74 R09: 00000000b1f2c129 [ 1591.863183][T21652] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20 [ 1591.863183][T21652] R13: 000000000018498d R14: 0000000000760db0 R15: 000000000075bf2c [ 1591.863183][T21652] ? wq_watchdog_touch+0x24/0x100 [ 1591.863183][T21652] Kernel Offset: disabled [ 1591.863183][T21652] Rebooting in 86400 seconds..